Jump to content
Sign in to follow this  
xyzulu

2FA enforced, but still required even after using Google Sign-in

Recommended Posts

Any ideas about adjusting this behaviour?
Currently with 2FA enabled, and a Google account linked the customer still needs to provide the 2FA code after login (using Google account). Seems a little over the top?

Share this post


Link to post
Share on other sites

That would be expected wouldn't it?  Logging in via gmail is really no different to entering the site login details. 

Once initially authenticated the second authentication method would kick in. 

Share this post


Link to post
Share on other sites

With 2FA I'm guessing the login process is done in two steps. I'd imagine the Google login is part of the first step of logging in, instead of entering the email and password. 2FA would be part of the second step.

Share this post


Link to post
Share on other sites

I guess the issue is that your Google account may or may not have 2FA enabled, if not enabled then the WHMCS account could be compromised if the Google account was breached.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated