Forum Discussion
DanielNiccoli
Feb 20, 2023Steel Contributor
SSPR - Force Registration?
I setup SSPR and require email and phone as other factors for the password reset feature. (MFA is already active for some time, so all users already registered their authenticator app.)
After signing in, users then see the "More information required" prompt on which they can only click "next". But on the actual registrations prompt, they can simply click "skip setup" and complete authentication without registering additional factors for SSPR. Consequently, SSPR won't work for users who skip it.
Is there any way to force users to enter these details before they're allowed to sign in?
- They will get prompted the next sign in until they complete it if you require registration, but I’m not aware of an approach forcing it. Perhaps inform the users why they shouldn’t skip that part as it’s for SSPR.
- DanielNiccoliSteel ContributorYes, we will communicate that. However, it would be easier to just force the user.