You can enable two-factor authentication (which is a form of multi-factor authentication) for all users in a company, or for a user group in a company. If you are a service provider in a multi-tenant Commvault Cloud environment, enabling two-factor authentication for all users is a convenient way to manage authentication for an entire company.
Note the following use cases for two-factor authentication:
-
Two-factor authentication is enabled for the MSP Provider only. In this case, MSP users will have to use two-factor authentication to access Commvault Cloud and the Commvault MSP Portal.
-
Two-factor authentication is enabled for the company (managed account). In this case, all tenants in a company will have to use two-factor authentication to access Commvault Cloud and the Commvault MSP Portal.
-
Two-factor authentication is enabled for users or for a user group. In this case, only certain users or a user group will have to use two-factor authentication to access Commvault Cloud and the Commvault MSP Portal.
Note
If a user is a member of multiple user groups, and you enable two-factor authentication for any of those user groups, then two-factor authentication is enabled for that user.
Before You Begin
- Optional: From the Command Center, create a user group (Manage > Security > User groups).
Procedure
-
From the Command Center, go to Manage > Company.
The company page appears.
-
In the General section, move the Enable two factor authentication toggle key to the right.
The Enable two factor authentication dialog box appears.
Note
If you configured Commvault Cloud to allow domain users to log on using Single Sign On (SSO), then two-factor authentication will not take effect on the domain users. We recommend you disable SSO for the respective domain controller.
-
Enable two-factor authentication as follows:
-
All: Enables two-factor authentication for all users in the company.
-
User groups: Enables two-factor authentication at the user group level in the company.
-
-
Click Save.