Unable to enforce 2FA for everyone - greyed out

Kofl · February 23, 2022, 1:41pm

Hi,

under System → General Settings " TwoFactorAuth" cannot be able.
The checkbox is not clickable. Latest Matomo version installed.

Am i missing a requirement?
Thanks

Lukas · February 23, 2022, 4:37pm

Does your superuser have 2FA already set up?

Otherwise enforcing 2FA doesn’t work (as no one could log in anymore):

github.com/matomo-org/matomo

Don't allow enforcing 2FA unless the superuser has set it up already

opened 03:13PM - 17 Mar 21 UTC

closed 11:52PM - 13 Apr 21 UTC

Findus23

Help wanted c: Usability

reported in https://forum.matomo.org/t/problem-with-the-two-factor-authenticatio…n-setting/41128 If a user who is unable to set up 2FA accidentally enables `Require two-factor authentication for everyone`, they are unable to disable it until they set up 2FA. (or they update the setting in the db: ```sql update matomo_plugin_setting set setting_value=0 where setting_name = 'twoFactorAuthRequired' ``` ) I think this setting should only be allowed if at least one superuser has 2FA already set up (or maybe only if the current superuser has 2FA already set up)