Skip to main content

How do I turn on 2FA or MFA for employees to log in to their accounts?

This article explains how administrators can secure employee access to Calamari using two-factor or multi-factor authentication (2FA/MFA) through supported SSO providers.

Written by Aleksandra Łysogir

Calamari currently does not provide built-in two-factor authentication for login and password access.

However, you can secure access to Calamari by using an external login provider that supports 2FA, such as Google, Slack, Microsoft 365, or another tool integrated with Calamari that provides SSO login.

Learn more about Calamari integrations here: Calamari Integrations: Built to Work With Your Tools

How to enable 2FA using an external login provider

  1. Make sure your employees use accounts from a provider integrated with Calamari.

  2. Enable two-factor authentication in that provider’s settings.

  3. In Calamari, go to Configuration → Permissions.

  4. Disable logging in with a Calamari login and password.

  5. Allow logging in only through the external provider.

Permissions settings view in Calamari. The ‘Ability to log in via login and password’ toggle is disabled, meaning users must log in to Calamari using SSO instead of a password.

Once configured, employees will access Calamari only through that provider. Since 2FA is handled on the provider’s side, this adds an additional security layer to your Calamari login process.

💡 Tip

To verify if an employee's Calamari profile is integrated, filter in the Configuration People section under the "Integrated with" column.

Screenshot of the Configuration → People section in Calamari showing the “Integrated with” column enabled through the “Customise columns” option. The table displays employee profiles and indicates which accounts are integrated with external providers, such as Slack, using provider icons in the “Integrated with” column.

Need a higher security standard?

If your organization requires advanced authentication or identity management, you may also consider using the SAML add-on.

Did this answer your question?