IF MFA is set as 'required' for a GVO then ALL users of that GVO must have MFA set up in order to access the GVO.
There can be certain situations where a particular user cannot use MFA (either via Authenticator or email) - if this is the case then this is the process to follow.
- The GVO Manager must agree that a user does not need MFA on their account
- The GVO Manager should contact GVO Support (01273 921066) and request that MFA is switched off for that user.
- GVO Support will check that the user does not have access to other GVOs - if they do then the managers of those GVOs will be contacted to ensure that the agree with the decision to switch off MFA for the user
- GVO Support will request written authority to switch MFA off for the user from the GVO Manager
- Once the written request has been received then GVO Support can disable MFA for that user (by editing the user profile with the super-admin account and selecting 'disable MFA).
- GVO Support keep a record of any user accounts where MFA has been disabled (date, user, who requested it)
- GVO Support will confirm that the change has been made and alert the GVO Manager to the potential security implications
MFA can be switched on again for the user at any point by request to GVO Support from the user or the GVO Manager.