2FA New user enrollment period?

[mfoley]

For enforcing 2FA on new accounts, Is the new user enrollment period from account creation or first sign in? 

[ddelboccio]

I'm going to take a guess and say it from the moment they first sign in.

[rdnixon]

We have a 1 month grace window. However, at many sites we issue a pre-configure security key so there is nothing for them to do.

[MattFeider · Accepted solution]

from account creation....we have had several issues that we create account ahead of time...and by the time the user tries to log in the first time...they run into problems as their account doesn't meet requirements for 2STEP....

however it is important to note...it's an easy fix...simply generate the temporary codes and provide...they use that code, and proceed...

however on a phone it won't continue the wizard...so encourage people to do it on a computer browser

[mfoley]

Thanks!