Page Comparison

security.two_factor_authentication_enabled

true | false

Should the system enforce two factor authentication

security.two_factor_authentication_scope

all | admin | system | system-admin

For who should the system enforce two factor authentication. Options: all | admin | system.

all = All users
admin = All admin users (customer and system level)
system = All system level users (reseller managers, system manager and system administrators)
system-admin = All system administrators (not reseller manager and system managers)

security.two_factor_authentication_provider_typetypes

email|otp|twilio | email

The enabled two factor authentication provider typetypes delimited by |. Options: twilio (SMS), email (SMTP).

otp = Use OTP Authenticator apps
twilio = Use Twilios SMS service (see section below for required provider specific configuration)
email = Use the default SMTP for sending the 2FA verification code

security.two_factor_authentication_valid_for_minutes

-1 | integer

The time between two factor authentication requests. I.e. if the user have previously logged in the within the last X minutes the 2fa step is skipped.
-1 will force 2FA on every login.