User guide / Admin Console / Enabling two-factor authentication
AdministrationEnabling two-factor authentication
Require a confirmation code when all the organisation's members sign in, by email or with an app.
2 min read updated November 2026
Two-factor authentication protects your organisation's accounts: in addition to their password, each member confirms their sign-in with a code. It is off by default and is set for the whole organisation. This setting is reserved for administrators.
Enabling two-factor authentication
- 1Open the Admin Console, then Organisation.
- 2In the Security block, choose the Method: Code by email or App (QR code).
- 3Turn on Mandatory two-factor authentication, then confirm.
Choosing the method
Code by email
The simplest to roll out: nothing to install. Each member receives a code by email when signing in.
App (QR code)
The most secure: each member links an authenticator app (Google Authenticator, Microsoft Authenticator…) by scanning a QR code, the first time they sign in.
The method is the same for all the organisation's members.
What members experience
The next time they sign in, after their password, members enter a code. Once the code is confirmed, the device is remembered for 30 days: the code is not asked again at each sign-in. The page "Signing in with two-factor authentication" explains the steps to them.
SSO sign-ins are not affected: when a member signs in with your company SSO, two-factor authentication is handled by your directory.
Good to know: let your members know before turning the option on, especially with the app method: they will need their phone at hand the next time they sign in.
Frequently asked questions
Can I enable two-factor authentication for some members only?
No: it applies to all the organisation's members who sign in with a password.
What if a member has lost their authenticator app?
They need to contact you: as an administrator, you help them link their new app. Contact Gladys support if needed.
Can I turn two-factor authentication off?
Yes, at any time, from the same Security block.