• State Verified Answer
  • Replies 2 replies
  • Subscribers 28 subscribers
  • Views 632 views
  • Users 0 members are here
Options
Related

Enable secondary authentication on SPP group

daniele demarco
over 1 year ago

Hello,

I'm using One Identity Defender to enable the 2FA in Safeguard for Privileged Password.

I enabled the secondary authentication option in the Active Directory group's authentication tab on SPP but the users are still able to login without the OTP.

If I enable the secondary authentication on the single user it works fine.

Is there a workaround to enable that for many users all at once?

Parents
  • +1 over 1 year ago

    HI Daniele,

    If you enable it for a new AD Group where the users have not been imported already in SPP, does that work?

    It seems if the AD group is modified after the users have already been imported might not update existing users.

    You could utilize the Core API to enable it for each user in bulk possibly, otherwise, if deleting the users is an option (this will remove any associated entitlements too so be careful) and adding them back via the AD group but having set the setting on the AD Group before adding these users back is another option?

    Thanks!

Reply
  • +1 over 1 year ago

    HI Daniele,

    If you enable it for a new AD Group where the users have not been imported already in SPP, does that work?

    It seems if the AD group is modified after the users have already been imported might not update existing users.

    You could utilize the Core API to enable it for each user in bulk possibly, otherwise, if deleting the users is an option (this will remove any associated entitlements too so be careful) and adding them back via the AD group but having set the setting on the AD Group before adding these users back is another option?

    Thanks!

Children