Set Two-Factor Authentication (2FA) for Users⁠

Administrators can enable two-factor authentication for their Users to add another layer of identity verification. Once two-factor authentication is enabled, a TOTP Authenticator application (for example, Google Authenticator) provides an authentication code when users authenticate. The authentication check is performed, as applicable, whenever the User/Administrator attempts to:

1. Sign in to the User/Administration portal.

2. Sign in with the OpenVPN Connect app to add a connection Profile.

3. Connect to WPC using the OpenVPN Connect app.

The Administrator can choose to allow Users to skip 2FA on trusted devices. If allowed, the User isn’t prompted to authenticate with 2FA on a trusted device for 30 days after the initial 2FA authentication.

The default setting for 2FA authentication for Users is OFF. To turn this setting on/off, follow the steps below:

1. Sign in to your WPC's Administration portal by entering your Cloud ID in a web browser (for example, company_name.openvpn.com).

2. Navigate to Settings > User Authentication.

3. Click Edit, which is located in the top right corner.

4. Toggle the Two-Factor Authentication switch ON/OFF.

5. You can select or deselect the Allow Trusted Devices checkbox when the Two-Factor Authentication switch is ON.

6. Click Update.

7. Check that the details shown in the confirmation dialog box are correct, and click Confirm.