Can we use 2fa for some particular groups or users, not everyone?

Feature
1

Hi Guys

We want to enable the 2fa feature for some specific groups or communities. What I mean is, that people may need to provide the 2fa code to visit some threads or discussions even though they are logged in. Is there a way to do this in Discourse?

Thanks in advance

2

I don’t believe this is possible at the moment as the 2fa options are all, staff and no

1 Like
3

Does the Staff mean the members with Staff level access only or all types of member levels? Can Admin have 2fa enabled for them only?

Thanks

4

Staff means Moderators and Admins. All users can use it at any time if they wish. The setting is for enforcing it.

It can only apply to the whole Forum, not seperate categories.

You could get fancy and have two separate instances, with one SSO’ing into the other. You’d have the ‘slave’ instance having two-factor enforced, and used for the highly sensitive stuff. Of course, you wouldn’t be able to move stuff easily between the instances which might be a bit of a pain. And the maintenance burden.

1 Like