Enforce Two-factor Authentication for Extension Users

To enhance security for users' accounts, you can make Two-Factor Authentication (2FA) mandatory for extension users. In this way, users will be required to go through two-factor authentication when logging in using their extension username and password, thus preventing unauthorized access.

Enforce two-factor authentication for all extension users

Requirements
  • Yeastar P-Series Software Edition is 83.14.0.24 or later.
  • Linkus Desktop Client is 1.4.9 or later.
Procedure
  1. Log in to PBX web portal, go to Security > Security Settings > Security Options.
  2. In the Two-Factor Authentication section, select the checkbox of Make Two-Factor Authentication Mandatory for All Extensions.

  3. Click Save.
Result
The result varies depending on whether the two-factor authentication (2FA) feature is enabled on user's Linkus clients:
  • 2FA is already enabled on users' Linkus clients

    These users will not experience any interruption in using Linkus.

  • 2FA is disabled on users' Linkus clients

    Users who attempt to log in or are already logged in Linkus Web Client or Desktop Client using their extension username and password, the two-factor authentication setup window will pop up, requiring the users to complete the 2FA setup for their accounts. Otherwise, their accounts will be automatically logged out.

Enforce two-factor authentication for specific extension users

Requirements
The firmware version of Yeastar P-Series Software Edition is 83.25.0.23 or later.
Procedure
  1. Log in to PBX web portal, go to Extension and Trunk > Extension.
  2. Click beside the desired extension.
  3. In the Security tab, scroll down to the Login Security section to configure the following settings.

    1. Select the checkbox of Make 2FA Mandatory for the Extension.
    2. Optional: In the Permitted 2FA Verification Method drop-down list, select the allowed verification method.
  4. Click Save.
Result
The result varies depending on whether the two-factor authentication (2FA) feature is enabled on user's Linkus clients:
  • 2FA is already enabled on users' Linkus clients

    These users will not experience any interruption in using Linkus.

  • 2FA is disabled on users' Linkus clients

    Users who attempt to log in or are already logged in Linkus Web Client or Desktop Client using their extension username and password, the two-factor authentication setup window will pop up, requiring the users to complete the 2FA setup for their accounts. Otherwise, their accounts will be automatically logged out.