Settings (Basic): Manage 2FA for your team & clients
In this article, you will learn how to enable Two-factor authentication (2FA) for team members and clients and disable it if they lose access.
Note! This article is for firm owners and admins only.
Two-factor authentication (2FA), explained
Two-factor authentication (2FA) adds an extra layer of security when accessing TaxDome. The additional step of authenticating your identity makes it much harder for an attacker to access your data, even if your credentials have been compromised.
By default, the 2FA feature is disabled, but your team members and clients can enable and disable it anytime. However, you can switch to a stricter security policy and make the use of 2FA mandatory for team members and clients. In this case, 2FA will be obligatory for enabling and cannot be skipped/disabled.
Require 2FA for all team members/clients
As a firm owner or admin, you can configure the mandatory 2FA for team members (firm employees) and/or clients:
1. Go to Settings > Firm settings from the left sidebar menu.
2. In the 2FA activation settings section:
a. Select the Require 2FA for all team members checkbox.
Attention! Once saved, you will enable the need to set up 2FA for all firm members, including the admin and firm owner.
b. (Optional) You can apply 2FA starting from a specific date (delayed start).
c. Select the Require 2FA for all clients checkbox.
d. (Optional) You can apply 2FA starting from a specific date (delayed start).
3. Click Save to apply the changes.
If you applied 2FA with a delayed start date, team members and clients will see an alert in the portal prompting them to set up 2FA in advance.
Starting from the selected date, every firm employee (team member) and/or client should set up 2FA for their account and enter a one-time code when logging into the portal.
Troubleshooting log in with 2FA enabled
If your team members or clients can't log into the portal because they have lost access to the authentication app and don't know the code, they can click Contact us. Then, a firm owner will receive a notification via email, and a firm owner or admins can disable 2FA manually in the portal.
If you, as a firm owner or admin, want someone else to receive 2FA disable requests:
1. Go to Settings > Firm settings from the left sidebar menu.
2. In the 2FA troubleshooting section, enter the email address.
3. Click Save.
Disable 2FA for team members/clients
Once you’re aware that a team member or client is having trouble signing in, you can disable 2FA.
For team members
1. Go to Settings > Team & plans from the left sidebar menu.
2. Open the Team members tab.
3. You’ll see which team members have 2FA enabled.
4. Click the three dots to the far right of the team member’s name and select Disable two-factor authentication. Then, click Confirm.
For clients
1. Open the client profile and switch to the Info tab.
2. Click the three dots next to the contact's email address in the Contacts section.
3. Select Disable two-factor authentication.
4. Click Confirm.
