Removing 2FA Requirement

Site Administrators can remove the 2FA requirement for any user account. Users can remove the 2FA requirement from their own account if site-level enforcement settings allow it, or if their Site Administrator has permitted them to do so.

Removing Site-Level 2FA Enforcement

Site Administrators can remove the site-level 2FA requirement for all users or for Site Administrators only. A 7-day waiting period applies before the change takes effect, and the delay covers every user previously subject to the enforcement setting.

Removing the 2FA Requirement from a User Account

Site Administrators can remove the 2FA requirement from an individual user account from the user's profile. Disabling this setting removes the requirement to use 2FA but does not delete any previously configured 2FA methods from the user's account. The user can sign in without being prompted for 2FA, and their enrolled methods remain available for future use.

Removing the requirement at the site level affects users whose 2FA setting is configured to use site-wide setting. For all other users, any custom setting explicitly configured for their account continues to apply.

Removing the 2FA Requirement from Your Account

Users can remove the 2FA requirement from their own account from the My Account page by providing a valid code or confirmation from one of their existing 2FA methods, if site-level enforcement settings allow it or their Site Administrator has permitted them to do so. Valid confirmation methods include a hardware key, YubiKey (native mode), authenticator app, SMS, or email verification. If none of the 2FA methods are accessible, for example if a device is lost, a Site Administrator must remove the 2FA requirement on the user's behalf.

Enabling or Disabling Supported 2FA Methods

If you are not removing the 2FA requirement but instead enabling or disabling supported 2FA methods for your users, see Changes to Supported 2FA Methods for details on how this affects existing users.