Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




14888 posts

Uber Geek
+1 received by user: 2794

Trusted
Subscriber

# 250577 16-May-2019 20:34
Send private message quote this post

I'm trying to help someone set up MFA for their paid Google Apps account. First hurdle was you have to enable MFA in the Google Admin settings, done.

 

Now they want to use Google Authenticator / Authy, but the only MFA options given are "security key" and "google prompt". How do you enable this?


Create new topic

Stu

Hammered
5250 posts

Uber Geek
+1 received by user: 1179

Moderator
Trusted
Lifetime subscriber

  # 2239535 16-May-2019 20:49
2 people support this post
Send private message quote this post

Once you have one of the suggested options enabled, you should be offered an option to use an authenticator app.




Keep calm, and carry on posting.

 

 

 

Click to see full size Click to see full size




14888 posts

Uber Geek
+1 received by user: 2794

Trusted
Subscriber

  # 2239541 16-May-2019 21:12
Send private message quote this post

Thanks Stu, I'll get them give that a go.


 
 
 
 


2272 posts

Uber Geek
+1 received by user: 709

Subscriber

  # 2239546 16-May-2019 21:27
Send private message quote this post

It's under Security > Advanced security settings, in the admin console. Can be set globally or per OU.

 

 

 

I'd say they need to change the allowed 2FA methods per below.

 

 

 




14888 posts

Uber Geek
+1 received by user: 2794

Trusted
Subscriber

  # 2239561 16-May-2019 21:44
Send private message quote this post

I changed that already thanks. I think maybe it's like Stu said, do it their way first then maybe it will work.

2272 posts

Uber Geek
+1 received by user: 709

Subscriber

  # 2239566 16-May-2019 22:05
Send private message quote this post

I've never seen that behaviour before. Is it a new account? Has the user generated their backup codes? Is the new user enrolment period set? If you enable 2FA on a user before they have an actual 2FA setup, then you either need a pre-enrolled security key type device or backup codes for the first login. 

 

 

 

IF you're still stuck, you should have access to their chat support in the top right of the admin console. 


2355 posts

Uber Geek
+1 received by user: 413

Trusted
Subscriber

  # 2239571 16-May-2019 22:32
Send private message quote this post

How bizarre, normally just shows up here as an option:

 

https://myaccount.google.com/signinoptions/two-step-verification?


961 posts

Ultimate Geek
+1 received by user: 197

Trusted

  # 2239576 16-May-2019 22:43
Send private message quote this post

timmmay:

 

I'm trying to help someone set up MFA for their paid Google Apps account. First hurdle was you have to enable MFA in the Google Admin settings, done.

 

Now they want to use Google Authenticator / Authy, but the only MFA options given are "security key" and "google prompt". How do you enable this?

 

 

tl;dr - Install Authenticator app > login >Security > Signing in to Google > 2-Step Verification - Didn't work for me.

 

 

 

Full explanation

 

Yeah, you enable MFA by visiting a link similar to this: https://admin.google.com/[yourdomainhere]/AdminHome#ServiceSettings/notab=1&service=securitysetting&subtab=org

 

 

The "Learn more" link takes you to this help page. It does specifically list Google Authenticator. As with any Google service, it can take up to 24hrs to replicate and apply to all users. Besides Google Prompt, I too only get two options:

 

 

From the above help page, you can link to "Turn on 2-Step Verification" for enterprise users. Jumping down to Step 2 and clicking on "Authenticator app codes" takes you to Install Google Authenticator. Step 4 lists "Under "Set up alternative second step," find "Authenticator app" and tap Set up".

 

Quick link for users to configure MFA / 2FA / 2SV: g.co/2sv

 

Hopefully that does it for you?





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


 
 
 
 




14888 posts

Uber Geek
+1 received by user: 2794

Trusted
Subscriber

  # 2239650 17-May-2019 07:20
Send private message quote this post

lxsw20:

 

I've never seen that behaviour before. Is it a new account? Has the user generated their backup codes? Is the new user enrolment period set? If you enable 2FA on a user before they have an actual 2FA setup, then you either need a pre-enrolled security key type device or backup codes for the first login. 

 

 

 

IF you're still stuck, you should have access to their chat support in the top right of the admin console. 

 

 

I think it's a very old account. It may even be a grandfathered free plan. I'll check on those backup codes thanks.




14888 posts

Uber Geek
+1 received by user: 2794

Trusted
Subscriber

  # 2239653 17-May-2019 07:21
Send private message quote this post

ANglEAUT:

 

timmmay:

 

I'm trying to help someone set up MFA for their paid Google Apps account. First hurdle was you have to enable MFA in the Google Admin settings, done.

 

Now they want to use Google Authenticator / Authy, but the only MFA options given are "security key" and "google prompt". How do you enable this?

 

 

tl;dr - Install Authenticator app > login >Security > Signing in to Google > 2-Step Verification - Didn't work for me.

 

 

 

 

 

 

Thanks, I'll have a look at that. The person I'm helping is in another country and I never have access to a device or directly to their account, just to the admin screen.


961 posts

Ultimate Geek
+1 received by user: 197

Trusted

  # 2240098 17-May-2019 18:22
Send private message quote this post

timmmay: I think it's a very old account. It may even be a grandfathered free plan. I'll check on those backup codes thanks.

 

Mine certainly is very old & the grandfathered free plan

 

 





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


961 posts

Ultimate Geek
+1 received by user: 197

Trusted

  # 2240100 17-May-2019 18:30
Send private message quote this post

lxsw20: IF you're still stuck, you should have access to their chat support in the top right of the admin console. 

 

The Legacy Free plan does not have phone, chat or email support as per https://support.google.com/a/answer/1047213

 

Let's hope Timmay is on a paid plan.





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.




14888 posts

Uber Geek
+1 received by user: 2794

Trusted
Subscriber

  # 2240184 17-May-2019 20:26
Send private message quote this post

It's not my plan, I'm helping someone out.


Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Dunedin selects Telensa to deliver smart street lighting for 15,000 LEDs
Posted 18-Jul-2019 10:21


Sprint announces a connected wallet card with built-in IoT support
Posted 18-Jul-2019 08:36


Educational tool developed at Otago makes international launch
Posted 17-Jul-2019 21:57


Symantec introduces cloud access security solution
Posted 17-Jul-2019 21:48


New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.