---
title: Set Two-Factor Authentication (2FA) for Users
canonical: https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-two-factor-authentication--2fa--for-users/
product: CloudConnexa Docs
description: Administrators can enable two-factor authentication for their Users to add another layer of identity verification.
keywords: 2FA
---

# Set Two-Factor Authentication (2FA) for Users

Administrators can enable two-factor authentication for their Users to add another layer of identity verification. Once two-factor authentication is enabled, a TOTP Authenticator application (for example, Google Authenticator) provides an authentication code when users authenticate. The authentication check is performed, as applicable, whenever the User/Administrator attempts to:

1. Sign in to the User/Administration portal.
2. Sign in with the OpenVPN Connect app to add a connection Profile.
3. Connect to WPC using the OpenVPN Connect app.

The Administrator can choose to allow Users to skip 2FA on trusted devices. If allowed, the User isn’t prompted to authenticate with 2FA on a trusted device for 30 days after the initial 2FA authentication.

> **Note**
>
> CloudConnexa provided 2FA can be used only if user authentication uses LDAP or CloudConnexa (Email/Password) authentication. When SAML is used for user authentication, the SAML Identity Provider configuration for 2FA is applicable.

> **Note**
>
> The Owner must set 2FA by going to **My Account's Security & Privacy** tab, refer to [Video: Configure MFA For Your OpenVPN Account](https://openvpn.net/cloud-docs/videos/configuration/authentication/video--configure-mfa-for-your-openvpn-account.md). The 2FA setting described below only applies to Users and Administrators of the WPC.

The default setting for 2FA authentication for Users is OFF. To turn this setting on/off, follow the steps below:

1. Sign in to your WPC's Administration portal at your **Cloud ID** address (for example, `yourcompany.openvpn.com`).
2. Navigate to **Settings \> User Authentication**.
3. Click **Edit**, which is located in the top right corner.
4. Toggle the **Two-Factor Authentication** switch ON/OFF.
5. You can select or deselect the **Allow Trusted Devices** checkbox when the **Two-Factor Authentication** switch is ON.
6. Click **Update**.
7. Check that the details shown in the confirmation dialog box are correct, and click **Confirm**.

## Related Video

[Video: Configure Multi-Factor Authentication (MFA) For Users](https://openvpn.net/cloud-docs/videos/configuration/authentication/video--configure-multi-factor-authentication--mfa--for-users.md)

---

Prev: [LDAP User Group Mapping](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-ldap-user-group-mapping-rules.md)
Next: [Password Management](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-user-password-management-policy.md)
Index: https://openvpn.net/cloud-docs/llms.txt