I want to be able to set up two-factor authentication (2FA) for my account to improve security. Currently, there is no option for TOTP or other 2FA methods.
Allow and enforce multi-factor authentication or FIDO2 for admins
As an information security officer onboarding Featurebase for our organization, we have certain compliance requirements. Our organization needs at least multi-factor authentication for administrators as a best practice. Methods can be a time based one-time-password. Currently we can only log in with username and password or integrate with SSO. Ideally authentication also supports modern non-phishable standards such as passkeys and hardware security keys.
There should not only be the option for users to enable MFA, but also for administrators to enforce MFA. As we connect internal tools containing sensitive information, this is a risk for us. We believe MFA is something every modern tool should support as a basic feature.
Thanks!
Ian
•
Mar 12
Upvoted. I’m at risk of having to stop using Featurebase if this is not implemented soon, due to compliance failure.
Log in to comment and vote
Comments4
Jul 14
PinnedThanks for sharing this eveyone! Native 2FA is now available for Featurebase admins on all plans.
You can enable it for your own account under Settings → Profile → Two-factor authentication using any compatible authenticator app.
Workspace owners can also go to Settings → Auth & Security → Security and enable Require 2FA for all admins to enforce it across the workspace.
Recovery codes are provided during setup in case you lose access to your authenticator app.
Antoine Lassier
Jul 14
•Merged request
•3 votes
2FA/MFA for Team Members
Jordy Witteman
Jul 14
•Merged request
•2 votes
Allow and enforce multi-factor authentication or FIDO2 for admins
As an information security officer onboarding Featurebase for our organization, we have certain compliance requirements. Our organization needs at least multi-factor authentication for administrators as a best practice. Methods can be a time based one-time-password. Currently we can only log in with username and password or integrate with SSO. Ideally authentication also supports modern non-phishable standards such as passkeys and hardware security keys.
There should not only be the option for users to enable MFA, but also for administrators to enforce MFA. As we connect internal tools containing sensitive information, this is a risk for us. We believe MFA is something every modern tool should support as a basic feature.
Thanks!
Ian
Mar 12
Upvoted. I’m at risk of having to stop using Featurebase if this is not implemented soon, due to compliance failure.