Forum Discussion

DanielNiccoli's avatar
DanielNiccoli
Steel Contributor
Feb 20, 2023

SSPR - Force Registration?

I setup SSPR and require email and phone as other factors for the password reset feature. (MFA is already active for some time, so all users already registered their authenticator app.)

 

After signing in, users then see the "More information required" prompt on which they can only click "next". But on the actual registrations prompt, they can simply click "skip setup" and complete authentication without registering additional factors for SSPR. Consequently, SSPR won't work for users who skip it.

 

Is there any way to force users to enter these details before they're allowed to sign in?

 

 

  • They will get prompted the next sign in until they complete it if you require registration, but I’m not aware of an approach forcing it. Perhaps inform the users why they shouldn’t skip that part as it’s for SSPR.
    • DanielNiccoli's avatar
      DanielNiccoli
      Steel Contributor
      Yes, we will communicate that. However, it would be easier to just force the user.

Resources