Skip to main content
Answered

2FA and SSO

  • January 25, 2023
  • 2 Antworten
  • 0 Aufrufe
A
Busy Bee
Forum|alt.badge.img+8

We have sso enabled for all users at the moment but we haven't enforced it. Can I have MFA with Google Authenticator showing for the system admins and have SSO enabled for the rest of the team? 

When I went to the Settings function and looked at the security settings for the Admin role, it already had 2FA ticked so I’m not sure if it is possible to have a mixture, and how to do it. 

Beste Antwort von ConorCunningham

Hey @AliceM,

Unfortunately on Personio we cannot choose the employees who we want the SSO to be disabled for. In this case, you can either have it on for all employees or off for all employees. 

For more information on this topic, I am providing you with our helpcenter guides below:​​​​​​

I would kindly ask that you submit this feature request via our Ideation Area for future considerations by our Product Team.

If there is anything else you need help with, let me know 😁

Best,

Conor

    2 Antworten

    C
    Personio Team
    Forum|alt.badge.img+8
    • ConorCunninghamPersonio Team
    • Personio Team
    • Antwort
    • January 26, 2023

    Hey @AliceM,

    Unfortunately on Personio we cannot choose the employees who we want the SSO to be disabled for. In this case, you can either have it on for all employees or off for all employees. 

    For more information on this topic, I am providing you with our helpcenter guides below:​​​​​​

    I would kindly ask that you submit this feature request via our Ideation Area for future considerations by our Product Team.

    If there is anything else you need help with, let me know 😁

    Best,

    Conor

      A
      Busy Bee
      Forum|alt.badge.img+8
      • AliceMBusy Bee
      • Autor*in
      • Busy Bee
      • February 9, 2023

      Hi @ConorCunningham , 

      Thanks for getting back to me. 

      I discussed this with our IT security person, who in fact advised that SSO would be the preferred option over MFA and said that even if the system allowed, we shouldn’t go back to MFA for the system admins anyway.

      My thought had been to ensure the strongest protection for those with the fuller system access and I thought MFA was the stronger. But since I had it the wrong way round, we don’t need this option anyway so I won’t put it in the ideation area afterall.

      I’m happy that the option that I thought I wanted wasn’t available when it wasn’t what I actually needed! 

       

      Have a lovely day,

      Alice

        Nutzungsbedingungen für die Personio Voyager CommunityAccessibility statement