Marlow: MFA for portal administrators
Description
Hi,
our insurer's renewal form asks whether admin users of our systems have two-factor authentication. Do you support it for the portal? If yes, how do we turn it on? The renewal is due 30 June.
Tom Ashby Operations, Marlow Cold Chain
Linked issues
- relates to ENG-1362 Marlow: require a second factor for administrators Closed
- relates to ENG-1431 MFA for administrators Done
- relates to SUP-945 Marlow: administrator locked out after changing phone Done
Comments (5)
Started yesterday (MFA for administrators, ENG-1431). TOTP with an authenticator app, required for every administrator, no opt-out. Aiming for early June. Fine to tell Marlow 'before the end of June'.
Tom, our security lead confirms it will be ready before the end of June: every administrator will use an authenticator app as a second step.
That works for the renewal. Thanks.
Hi Tom, it's live today. At their next sign-in, every Marlow administrator is asked to set up an authenticator app (any TOTP app works) and enter a code. After that they enter a code at each sign-in.
People who aren't administrators sign in as before. Closing this one; good luck with the renewal.
Hi Tom,
Not yet. Today administrators sign in with a password only.
A second factor for administrators is being built right now. I'll confirm the date here as soon as I have it.