Does anyone know if it is possible to enforce MFA/2FA on an Umbraco Cloud site? For those invited to the organisation and therefore to the Cloud portal this seems to be possible, but I am specifically looking to enforce this for newly invited back office editors who create an Umbraco ID to be able to access the site.
Have you found an answer to your question, Matt? Currently, it is not possible to enforce MFA on Umbraco Cloud for all Umbraco backoffice users; however, this option is available for members.
Related document: Multi-Factor Authentication | Cloud | Umbraco Documentation
Hi Nurhak,
Sorry, I missed the notification! No, still not possible at the moment, but I have had several conversations about it with @bergmania from the Umbraco Cloud team and I’m hoping the situation will change soon.
It sounds like it might be slightly problematic to implement. We’ve talked about enforcing it by project, to enforce 2FA across the board for every login, another idea is to limit invites by (already verified) domain name and to enforce 2FA for those domains. I get the impression that the solution might depend on the limitations of the id provider.