I have a question about 2 Factor Authentication : why is it account scoped ?
ie why 2FA should be activated in each account, instead of being enforced by an admin for every accounts ?
I thought that it might be a workflow consideration but it’s not really scalable if an admin has to create every accounts.
Mainly for legacy reason (still have older scripts functional) and also because of the dev time it takes to implement this as an option. But it is definitely in the TODO list to have the 2FA feature enforced by the admin for all accounts. Next release…