Configuring 2FA for Users in Drupal

This section explains how to configure Two-Factor Authentication (2FA) for both End Users and Administrators (Primary Admin) in your Drupal site.

1. Configure 2FA for Administrators (Primary Admin)

Setup 2FA for Admin

• Navigate to 2FA for Primary Admin tab.
• By default, OTP over Email is enabled.
• Choose or configure your preferred 2FA method.
• Complete the setup process.
• Once done, a success message will be displayed.

Admin Login Experience

• Admin opens the Drupal login page.
• Enters credentials.
• After successful login:
  • The configured 2FA method is triggered immediately.
• Admin completes verification.
• On success → Access is granted

2. Configure 2FA for End Users

Enable 2FA Enforcement

• Navigate to 2FA Policy for End Users tab.
• Under General 2FA Settings, enable: Enforce 2FA to End Users
• Click on Save Configuration.

Select Available 2FA Methods

• Click on Set Up Available 2FA Methods
• A popup will appear with all available methods
• Select the required methods:
  • TOTP Methods (Authenticator apps)
  • OTP Methods (Email/SMS)
  • Other Methods (KBA, Push, etc.)
    Click on Submit.

Restrict Specific 2FA Methods (Optional)

If you want to allow only selected methods:

• Go to 2FA Policy for End Users.
• Click on Set Up Available 2FA Methods.
• Select only the methods you want users to configure.
• Click on Submit.

End User Login Experience

• User opens the Drupal login page.
• Enter username/email and password.
• After successful login:
  • User is prompted to select a 2FA method (first-time setup)
• User configures the method by following the on-screen instructions.
• On successful setup → User is logged in with the configured 2FA method.

Note: On subsequent logins, the configured 2FA method will be directly triggered.