Note: Only Super Admins have the ability to enable MFA in bulk.
MFA can be enabled in bulk either for all admin permissions, or everyone on your Charlie account. This allows you to enhance security and enforce MFA so every account on Charlie is more secure.
To enable MFA in bulk:
Head to your Company tab
Then Click "Settings"
Scroll until you see the "Two-factor authentication" section
Choose if you was to enable this for Admins only or for everyone on the account
Click "Save two-factor setting" and follow the steps to enable this on your teams profiles.
Things to note:
When completing the 2FA set up, users will need to scan the QR code and connect their Charlie account with an authenticator app. This will allow MFA codes to be available on their device.
As soon as MFA is enabled by a Super Admin, all users included in the group the Super Admin has selected to enforce MFA will receive a nudge via email to set up their 2FA and will be prompted to complete their MFA set up the next time they attempt to log in to their account.
During the set up, all users included in the MFA enforcement group, will be prompted to copy or download their recovery codes. This ensures that if the device providing the MFA codes is lost, a recovery code can be used instead.
If 2FA is enabled, Single sign on will not be available.
New starters will be prompted to set up their 2FA during their onboarding to keep the organisation compliant.
Visibility of users with 2FA enabled will be available to Admins through the reports section on Charlie so you can stay on top of the enforcement of MFA.