Skip to main content

Options to Enforce Two-Factor Authentication (2FA)

Updated over 2 weeks ago

Using 2FA protects from unauthorised access to a person's account and increases data security.

Due to Xero requirements, ApprovalMax enforces 2FA for all users who access Xero-connected Organisations.

ApprovalMax offers two types of 2FA enforcement:

  • ​Soft enforcement: Every time users reload a webpage, they will be prompted to set up two-factor authentication (2FA). An email notification with a reminder will be sent additionally on a weekly basis.

  • Hard enforcement: Every user action will redirect the user to the 2FA enforcement webpage. An email notification with a reminder will be sent on a daily basis.

How to set up 2FA enforcement:

Administrators can choose between the two enforcement types on the Organisation settings and connection page:







Did this answer your question?