XF 2.0 How to turn off two factor authentication?

[kimberlysd07]

My members keep having to go through two factor authentication. How can I stop that from happening?

 

[kimberlysd07]

okay wait i think its because I put them all in groups.... yes I see. Doh

 

[kimberlysd07]

okay no members are still getting it. How do I turn this off?

 

[sbj]

See in user group permissions if you have enabled for the relevant usergroup (very likely the registered one) this permission:

 

[kimberlysd07]

She is set to no for both of the groups she's in but she keeps getting the request. :/

 

[sbj]

If she is an admin, there is also this option:



Other than that check her usergroups she belongs to and her as a user, if her stand-alone options for her user only are set to require it.

If all of that doesn't help (surely it must be in user(group) permissions), then go to your config file and put this into the file, which disables completely two-step verification for all users and you can't un-do it in ACP.

$config['enableTfa'] = false;

 

[kimberlysd07]

Thank you very much. Could you tell me where I can find the config file just in case?

 

[sbj]

In that folder wherever you have put the XF files in your hosted server.

Usually in a folder called public_html. The content of that folder will look like this:



In the src folder you will find the config file named config.php.

 

[kimberlysd07]

Thank you. I think I did it right... only time will tell.

 

[sbj]

You can come anytime to XF when you need more help. But as I said, it must have been a permission setting which enabled two-factor authentification. Or there is an addon involved which did it (but I doubt it as I haven't seen an addon which operates with 2FA.)

If you have put it in the config file that 1 line, you can easily test it. Go to a usergroup where you are in, put the permission to "yes" and log out from the site. Try to log in and see if it asks for it.

edit:

Btw. you can see for each user if it is enabled in their user profiles in ACP, in my example for the user "admin".

 

[clasione]

If she is an admin, there is also this option:

View attachment 191348

Other than that check her usergroups she belongs to and her as a user, if her stand-alone options for her user only are set to require it.

If all of that doesn't help (surely it must be in user(group) permissions), then go to your config file and put this into the file, which disables completely two-step verification for all users and you can't un-do it in ACP.

$config['enableTfa'] = false;

CONFIG FILE (Still works) very helpful. Thank you.