Forum Discussion

steve241's avatar
steve241
New Contributor
4 months ago

Enable Admins to require 2 Factor Authentication on end user accounts

For our company GoToMyPC Corporate version, there is 2-Step Verification feature ( using LastPass Authenticator app ), this feature can be globally enabled for every company users in GoToMyPC administrator control panel, but for some reason, we can not forcedly set this feature for every GoToMyPC users, we leave the option for each users to decide if they want to use 2-Step Verification feature and enable it from the user self account, but this causes a security concern for the users who do not use 2-Step Verification; we would like that GoToMyPC has a feature: if GoToMyPC user DOES NOT ENABLE 2-Step Verification, THEN every time when the user logins GoToMyPC account, send an alert email to the user, so in case someone else ( like hacker ) tries to login this user GoToMyPC account to access the user  computer when user self does not login but receive the login email, this user may be aware that the hacker has known the user name and password, so user may take the action; it seems amazon and some online Bank have this feature ( send alert email for the login activity with IP location, login time, even has browser type ).
 
  • AbhishekYadav's avatar
    AbhishekYadav
    GoTo Moderator
    4 months ago

    Hey steve241 ,

     

    The TFA setting is set to "optional" by default, but you can force it at both the group level and the entire account level.

    Here's how to do it:

    1. Log in to your GoToMyPC Manager account.

    2. Navigate to "Manage Groups" and click on the top-most group name. If you want to change this setting for specific groups, select the group name from the list. You’ll land on the "Group Info" page.

    3. Go to "Extended Authentication Settings" under Group Settings. In the 2-step verification section, select "Force" and click "Save Settings."

                   

     

    After this action, all users who haven’t set up TFA will be required to do so, while those who have already set it up will see no change in their login flow. 

     

    However, we currently do not have email alerts for these actions, as you suggested. We are working on this feature and plan to launch it soon.

     

    By the way, we now have an AI-powered chatbot on our support site that can answer queries like this. On the right side of the screen in the below sreenshot, you’ll see the AI response window with the relevant information

    You can access the chatbot by clicking the "GoTo" logo at the bottom right of the support site. I’ve attached a snippet from its response on this topic as well.

     

    Feel free to use it for any other questions.

     

    Best regards,

    Abhishek

    • steve241's avatar
      steve241
      New Contributor
      4 months ago

      Hi Abhishek,

       

            Thank you for your response; we know how to enable 2-Step Verification globally, but just like you set this feature as optional, we also can not forcedly enable it for all users ( leave this option for each user to decide ).

       

            I am glad to hear that you might implement email alert feature as second way to ensure the security.

       

      Best Regards,

      steve241