Any admin on the board can remove the requirement for all users to use multi-factor authentication when they log in to GovernorHub.
Removing this requirement will not automatically remove any MFA settings on any user’s accounts. Users will need to have their individual MFA settings removed from their account by an admin.
After MFA is no longer enforced on the account, users will not be required to reinstate MFA once it has been disabled.
Removing enforced MFA for a single board
The admin on the board will need to:
Go to the About tab.
Untick the box next to Require all members of this Governing Board to set up multi-factor authentication.
The requirement for all users on the board to use MFA has now been removed.
Please note:
MFA will not have been removed from individual users’ log ins, only the requirement. They will need to disable their MFA settings to remove this. They can then sign in using an email and password.
If MFA is enforced on any of a user’s other boards, e.g. another board outside of the Trust or single board within the trust that requires MFA, then the user will still be required to use MFA when they sign in to their account.
If MFA has been enforced on the board by the Trust, this can only be removed from the Trust level. The individual board will not be able to remove this requirement.
Removing enforced MFA for a Trust
The admin on the trust board will need to:
Go to the About tab.
Untick the box next to Require all members of this Trust Board to set up multi-factor authentication.
The requirement for all boards in the trust to use MFA has now been removed.
Please note:
Individual boards within the Trust can turn on enforced MFA. This will apply to users only registered on their account, not across the Trust.
MFA will not have been removed from individual users’ log ins, only the requirement. They will need to disable their MFA settings to remove this. They can then sign in using an email and password.
If MFA is enforced on any of a user’s other boards, e.g. another board outside of the trust or single board within the Trust that requires MFA, then the user will still be required to use MFA when they sign in to their account.
MFA has been enforced on the board by the Trust
When a Trust turns on multi-factor authentication for all its boards, only the Trust admin can then remove this setting.
The admin on the individual governing board will not be able to remove enforced MFA as it is a Trust requirement.
MFA has been enforced on the board by the governor service
A governor service may require all boards to use multi-factor authentication.
If this setting is turned on, any board under their service must have MFA enforced across their board.
This means that the enforcement of MFA for the board cannot be removed.
If this is the case, the tick box for will be greyed out.
Hovering the mouse over the Enforce multi-factor authentication option will bring up a grey box that lets you know this has been enforced by your governor service.
For any queries on this, you will need to contact your governor service directly.