🧭 Overview

Two-factor authentication (2FA) adds a second verification step when your team signs in to the SpyCloud Console.

Organization Scope
2FA applies to all users in a Console organization.

2FA Activation Permissions
Only SpyCloud system users have the permissions to enable 2FA for a Console organization. Review the supported authentication methods below and speak with either your SpyCloud representative or open a Support ticket to proceed with enabling 2FA.

Supported Authentication Methods

Method	Description
Email	Issues a TOTP code to the email address of the user.
Authenticator App	Issues a TOTP code from an authenticator app selected by the user.
Authenticator App	Also supports origin binding via a security key.

Implementation & Management

SpyCloud handles all aspects of implementing and managing 2FA configurations, which includes functions like resetting a user's 2FA settings or reviewing authentication errors. Customers are only expected to inform their users of the 2FA requirement and on the available authentication methods.

Please reach out to your SpyCloud CSM or log in to SpyCloud Help Center to open a support ticket.

SSO Incompatible
SpyCloud's 2FA capabilities are incompatible with SSO. 2FA is still possible with SSO in place, but it will be managed by your IdP. Review our SSO Configuration Guide for more information.