Requiring two-step verification
You can require two-step verification for your organization’s admins, or for everyone. People it covers have to use an authenticator app or a passkey when they sign in.
It is off unless you turn it on. Turning it on changes nothing for anyone the policy doesn’t cover.
Choose who must use it
- Go to Org → Settings → Admin Management.
- In the Two-step verification card, choose:
- Off: optional for everyone. This is the default.
- Admins: your national and regional admins must use it.
- Everyone: every member and admin must use it.
- Optionally set Required from. Until that date, people the policy covers see a reminder at the top of every page with a Set it up now link. Leave it blank to require it right away.
- Click Save.
All of your organization’s national admins get an email whenever the policy changes. The change is recorded in the audit log under Two-step Verification Policy.
Google, Apple and SSO sign-ins
- Google and Apple don’t tell GreekManage whether they checked a second step, so signing in with them counts as one step. People the policy covers are asked for their GreekManage code afterwards, or sent to set one up.
- Trust Google sign-in (shown once a policy is on) accepts a Google sign-in as meeting your policy. Turn it on only if your members’ Google accounts require a second step. It never applies to GreekManage staff, and it doesn’t change another organization’s policy for someone who belongs to both.
- Your own SSO provider: if it requires its own second factor, mark it Our SSO provider already requires MFA (SAML, OAuth). Sign-ins through it then count as two-step verification.
What people see
- Before the date: a reminder banner. Nothing is blocked.
- From the date, without two-step verification: after signing in they land on Set up two-step verification and can’t open anything else until they add an authenticator app or a passkey. Once the app’s code is confirmed, they continue straight into GreekManage.
- People who already have it: no change. They enter their code (or use their passkey) when they sign in, as before. Someone who signed in before setting it up is asked to sign in again with it.
- Turning it off: covered people can’t turn off their own two-step verification. If someone loses their phone, reset it for them from their member page (Security → Reset two-step verification). They set it up again the next time they sign in.
Options you can’t choose
GreekManage may set a minimum for your organization. Options below it are greyed out with the note GreekManage requires more than this for your organization.
If GreekManage pauses enforcement for every organization (for example during an incident), the card says so. Your choice is kept and applies again when enforcement resumes.