Articles on: Settings & configurations

Enable additional security for all users

As an admin, you can require users to log in with Two-factor Authentication (2FA) or Single Sign-on (SSO). You can require it for everyone in your Maglr environment at once, or for individual users.


The two options work as follows:


  • Two-factor Authentication (2FA): after entering their email address and password, the user also enters a code from the Microsoft Authenticator or Google Authenticator app on their phone. To see how a user sets this up, read Enable two-factor authentication for your account.
  • Single Sign-on (SSO): the user logs in with their Microsoft or Google business account instead of a Maglr password. SSO is available on the Enterprise plan only. To see how a user sets this up, read Enable single sign-on for your account.


You can require 2FA or SSO, but not both. In General settings and when you edit a user, checking one of the two greys out the other checkbox.


Requiring 2FA or SSO for all users


As an admin, you can require every user in your Maglr environment to set up Two-factor Authentication (2FA) or Single Sign-on (SSO) from the General settings page:


  1. In the dashboard, open the Settings menu and click General settings.
  2. Scroll down to the Account security section.
  3. Check Two-factor Authentication (2FA) or Single Sign-on. You can check only one of the two. The Single Sign-on checkbox appears only on the Enterprise plan.
  4. Click Save settings.


Image: requiring all users to enable Two-Factor Authentication (2FA) or Single Sign-on via the general settings in the Maglr dashboard


For the other options on this page, see General settings.


Requiring 2FA or SSO for one user


As an admin, you can require a single user to set up Two-factor Authentication (2FA) or Single Sign-on (SSO) from the Users page:


  1. In the dashboard, open the Settings menu and click Users.
  2. Click the pencil icon next to the user. To add a new user instead, click Invite user.
  3. In the Account security section, check Two-Factor Authentication or Single Sign-on (SSO). Check only one of the two.
  4. Click Save user. For a new user, click Invite user.


Image: user settings in the Maglr dashboard


When 2FA or SSO is required for all users, the matching checkbox is checked by default in each user's settings. For more on managing users, see Add / edit user profiles.


What users see at their next login


When an admin requires Two-factor Authentication (2FA) or Single Sign-on (SSO), the user is asked to set it up the next time they log in to Maglr:


  • 2FA: the user sees "Activate Two-Factor Authentication" and clicks Connect now to link the Microsoft Authenticator or Google Authenticator app.
  • SSO: the user sees "Activate Single Sign-on" and clicks Connect with Microsoft or Connect with Google to link their business account.


The user can click Skip for now up to 3 times. After that, they must set up 2FA or SSO before they can log in.


Frequently asked questions


Can I require both 2FA and SSO?


No. You can require Two-factor Authentication (2FA) or Single Sign-on (SSO), but not both. In General settings and when you edit a user, checking one of the two greys out the other checkbox.


Which plans include SSO?


Single Sign-on (SSO) is available on the Enterprise plan only. Two-factor Authentication (2FA) is available on the Basic, Advanced and Enterprise plans.


Can users skip setting up 2FA or SSO?


Yes, but only a few times. When an admin requires Two-factor Authentication (2FA) or Single Sign-on (SSO), the user can click Skip for now up to 3 times at login. After that, they must set it up before they can log in.


How do I see which users have set up 2FA or SSO?


Open the Settings menu and click Users. Each user who must use 2FA or SSO, or has already set it up, has a 2FA icon or an SSO icon next to their email address. An icon in colour means the user has set it up; a grey icon means they haven't set it up yet.


What happens when I turn off 2FA or SSO for a user?


When an admin unchecks Two-factor Authentication (2FA) for a user and saves, the user's authenticator app is disconnected from their Maglr account. When an admin unchecks Single Sign-on (SSO) for a user and saves, the user's SSO link is removed and Maglr emails them a link to create a new password.

Updated on: 28/10/2026