Log-in Challenge

[warthan]

Please create a way to turn off Log-in Challenge, at least for specific users. There are times and circumstances where this is not needed and becomes a hinderance to those trying to do their work.

Oh, and change the requirement for Labels. None of the available labels fits my request.

[Michelle]

Hello @warthan,

Can you please clarify if 'Log-in Challenge' is referring to two-factor authentication?  

Regards,

Michelle 

Community Manager

[warthan]

No, this is different than TFA. This is found at Admin Console > Users > Click on the user > Security > Log-in challenge.

[Michelle]

@warthan - Since this is Admin Console related.  I am moving your question to Workspace Q&A.

Regards,

Michelle

Community Manager

[jayhlee]

Hi warthan,

You can disable login challenges for a user for 10 minutes from the admin console. See:

https://support.google.com/a/answer/6002699?hl=en#zippy=%2Cif-the-user-cant-verify-their-identity-ca...

I'd also recommend setting user recovery phone, email and employee ID as additional login challenges to increase the success rate of login challenges for users:

https://support.google.com/a/answer/6002699

Finally, if users enable 2-factor authentication, that both increases the account security and serves as fulfilling the login challenge.

It's important to understand that login challenge is in place specifically to protect end user security and ensure accounts are not compromised.

Jay

[warthan]

Jay,

Thanks for your comment, however, there are certain times that these options are not needed, and even becomes a hinderance to people doing their work. We have certain emails that are generic and not assigned to a specific person. All of the security options then become a wall keeping employees from doing their work. Login Challenge, 2FA, recovery phone/email/id should be available for me as the admin to decide what works best for my company. Having the ability to have these security measures is great, but I should have the option as an admin on the account to turn them on or off, both company wide, as well as individual users.

[jjohnson589]

We need to be able to turn this off for certain users too. We have a testing center with users rotating between 150+ devices each time they test and phones are not allowed. Login Challenges come up randomly and make it impossible for all users to finish testing on time because we have to disable them one at a time