The Authentication section allows you to configure TOTP tolerance.This is a security measure to mitigate users with compromised credentials to enroll in MFA. When you restrict or disable enrollment, Google authenticator or other TOTP provider can still be used, but with added security which would not allow further user enrollment. If enrollment is disabled due to expired time frame or because the Do not allow option is selected, a user trying to log in will see an error message saying that enrollment is disabled and advising the user to contact the system administrator. You can allow all users to enroll without limitations (the Allow option), allow enrollment until the specified date and time ( Allow until), or completely disable enrollment (the Do not allow option). The User enrollment section allows you to limit user enrollment via Google Authenticator if needed.Technically, you can use any authenticator app (hence the ability to change the name), but at the time of this writing only the Google Authenticator app is officially supported. If you change the name, the sentence will contain the name you specify, such as "Install app on your iOS or Android device". The name will appear on the registration dialog in Parallels Client in the following sentence, "Install Google Authenticator app on your iOS or Android device". Display Name: The default name here is Google Authenticator.To configure Google Authenticator settings:
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |