Enforcing two factor configuration

[dan]

When enabling two-factor for a user, is there a way to do so such that they have to configure code and delivery on next login?

[dan]

Not within the FusionAuth OAuth2 workflows, but you could prompt the user to do this after login.

[mangeshp16]

@dan How to prompt the user to set up authenticator after login

[dan]

@mangeshp16 The original question is over two years old. Since version 1.42, you can enforce MFA at the tenant level (or the application level if you have the enterprise plan). This means that any user who logs in is required to have MFA. If they do not, they are redirected to a page where they can set it up.

There are other ways to accomplish this. You could build your own MFA page which would call the APIs directly. When a user logs in, you can check to see if they have any twoFactor methods available and if they don't, you can send them to this page.