Make Two-Factor Authentication Compulsory

Make Two-Factor Authentication Compulsory

This article is for Paymasters, Primary Group users, Primary Partner users and Primary Affiliate users.
2FA is compulsory for all Paymaster, Confirmer, Enquiry and Data Entry users. However, you can choose to make Leave Approvals users to setup 2FA as well. 

If two-factor authentication (2FA) is compulsory for a user, and the user has not set up 2FA, they will be required to set up 2FA on their user account when they next log into iPayroll. 

Make 2FA Compulsory For All Organisation Users

Go to Setup > Organisation.A Paymaster can set 2FA as compulsory for all Organisation users.

  1. Select the Defaults sub-menu.
  2. In the Organisation Preferences section, You can choose to make Leave and Timelog Approvers have compulsory 2FA.
    Depending on whether Timelogs is enabled or not, the name of the checkbox will differ.
  3. If you want Leave and Timelog Approvers to have to log in with 2FA, select the:
    • Include users with Leave Approvals Only access checkbox, or
    • Include users with Leave Approvals Only, Timelog Approvals Only, and Timelog and Leave Approvals access checkbox.
  4. Select Save.
  5. A success message displays confirming the details have been saved.

The next time a user logs into iPayroll, if they do not already have 2FA set up on their user account, they will be required to set it up as part of the login process. 
Along with any Organisation users, any Group, Partner or Affiliate users who have access to this organisation will also be required to have 2FA set up.

Make 2FA Compulsory For All Kiosk Users

A Paymaster can set 2FA as compulsory for all Kiosk users.

  1. Go to Setup > Organisation.
  2. Select the Defaults sub-menu.
  3. In the Kiosk section, select the Make two factor authentication compulsory for kiosk users checkbox.
  4. Select Save.
  5. A success message displays confirming the details have been saved.

The next time a user logs into their Kiosk, if they do not already have 2FA set up on their user account, they will be required to set it up as part of the login process.

Make 2FA Compulsory For a New Group, Partner or Affiliate User

A Primary Group, Partner or Affiliate user can make two-factor authentication compulsory for a user.

  1. Select the Users tab.
  2. Select +Add.
  3. In the New user section, enable the Requires 2FA checkbox.
  4. Complete setting up the user.
  5. Select Save.
  6. A success message displays confirming the user has been saved.
If at least one organisation the user has access to has compulsory 2FA set for its Organisation users, the Requires 2FA checkbox will be selected and non-editable on Save.
When the user logs into iPayroll for the first time, they will be required to set up 2FA as part of the login process.

Make 2FA Compulsory For An Existing Group, Partner or Affiliate User

A Primary Group, Partner or Affiliate user can make two-factor authentication compulsory for a user.

  1. Select the Users tab.
  2. Select either:
    • the user's hyperlink, or
    • the Pencil icon for that user.
  3. Enable the Requires 2FA checkbox.
  4. Select Save.
  5. A success message displays confirming the user has been saved.
If at least one organisation the user has access to has compulsory 2FA set for its Organisation users, the Requires 2FA checkbox will be selected and non-editable.
The next time the user logs into iPayroll, if they do not already have 2FA set up, they will be required to set it up as part of the login process.


    • Related Articles

    • Introduction to Two-Factor Authentication

      This article covers a basic overview of two-factor authentication: What is two-factor authentication? How does it work in iPayroll? Related articles What is Two-Factor Authentication? Two-factor authentication (or 2FA) is a method of confirming a ...

    • Reset Two-Factor Authentication

      Reset Two-Factor Authentication as a user If you access the Kiosk using a smartphone, see Disable or Reset Two-Factor Authentication in the Kiosk on a Smartphone. You may want to disable (optional 2FA) / reset (compulsory 2FA) your two-factor ...

    • Detailed Set up of Two-Factor Authentication

      Industry standard two-factor authentication (2FA) gives you and your organisation even more protection by requiring an extra identify confirmation at log in. Use these instructions to set up two-factor authentication if you do not access the Kiosk ...

    • Reset Two-Factor Authentication For a User

      Reset Two-Factor Authentication For a User This article is for Paymasters, Primary Group users, Primary Partner users and Primary Affiliate users. You only need to reset two-factor authentication (2FA) for a user if the user is unable to log into ...

    • Detailed Set up of Two-Factor Authentication to Access the Kiosk on a Smartphone

      Use these instructions to set up two-factor authentication if you access the Kiosk using a smartphone. Note: If you do not access the Kiosk via smartphone, see Detailed Set up of Two-Factor Authentication. Note: If you have installed the iPayroll ...