• Resolved katymorikawa

    (@katymorikawa)


    Hi,
    I enabled 2FA for our staging site https://staging-yehiteto.kinsta.cloud/, which went great and was really easy. However, my partner (who works remotely from me) and one of several other admins on the site, has encountered a number of difficulties logging in to set up 2FA for herself. I enabled a 1 week grace period, but it’s still giving her errors when she logs in via the WordPress login screen (see screenshot here https://s3.amazonaws.com/gaelwood/wp-content/uploads/2019/06/login-error.png). We were also testing the other login areas – WooCommerce’s My Account login, and our theme’s (OceanWP) pop-up header login. All of which has now blacklisted her, unfortunately. Those logins don’t work and throw errors.

    I know that I can whitelist her, but before I do that, I just wanted to know what are the recommended series of steps for a second, third, fourth, etc. admin to access the site and set up 2FA via WordFence after it has been initially activated and configured? This is an area that might be improved in the support docs.

    Thanks in advance for your help.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Hi @katymorikawa,

    The error message she is seeing Additional Verification required means that the recaptcha score was very low.

    The meaning of a low score means that Google recaptcha is fairly sure that the user is a bot.

    https://developers.google.com/recaptcha/docs/v3#score

    Unfortunately there are false positives, and if your partner is using a mobile connection – there’s a higher chance that Google will classify her connection as being automated.

    So there’s nothing more I can recommend for additional administrators. If they’re getting flagged as bots, you’ll want to whitelist them.

    Dave

    Thread Starter katymorikawa

    (@katymorikawa)

    Okay, so other than false positives and whitelisting, can you please advise the recommended procedure for adding additional admins once 2FA has been activated and configured? I have other admins to add.

    Again, it would be helpful if this were clearly spelled out in your support docs.

    Thanks,

    Hey @katymorikawa,

    My apologies, it looks like your last update was missed.

    Each admin will need to set up Two-Factor themselves. If they haven’t individually configured it they won’t get the prompt to enter the code.

    Thanks,

    Gerroald

    Thread Starter katymorikawa

    (@katymorikawa)

    Thanks, we did get it set up, but it does create issues for 3rd party tech support needing to login as admin to troubleshoot. I’m going to call this resolved.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Please advise steps for adding 2FA for additional Admins’ is closed to new replies.