Vossberg: shared HR administrator account and MFA

Project: Support
Type: Question
Status: Done Done
Priority: Medium
Organization: Vossberg Logistik
Reporter: Bettina Hahn <bettina.hahn@vossberg.example>
Assignee: Ines Costa <ines.costa@acme-hq.example>
Labels: vossberg-logistikmfaadministrators
Components: identity-service
Created: 11 Jun 2026, 13:00 UTC
Updated: 12 Jun 2026, 09:40 UTC
Resolved: 12 Jun 2026, 09:40 UTC

Description

Our HR team of three shares one administrator account (hr-admin@vossberg.example). Since today it wants an authenticator app on one phone. What should we do?

Comments (3)

Ines Costa · 11 Jun 2026, 14:20 UTC

Hi Bettina, a second factor is meant for one person, so we'd recommend a personal administrator account for each of the three, and deactivating the shared one.

It also helps afterwards: everything a shared account does shows as "hr-admin", which made the Leipzig deactivations last month (SUP thread SUP-872) hard to trace.

Bettina Hahn · 12 Jun 2026, 09:20 UTC

OK. Three accounts made, shared one deactivated.

Ines Costa · 12 Jun 2026, 09:40 UTC

Thanks. Closing.