virtualmin create-domain enroll for 2FA option

[danboid]

I would like a --enroll-for-2fa option or something similar for the virtualmin create-domain command please.

Until such an option gets implemented, is there a way to enroll existing users/domains into using 2FA from the command line?

[iliajie]

Hello,

We expect users to enroll themselves. A master administrator shouldn't enroll users in 2FA. This is each user's responsibility, and they can do it right after logging in.

[jcameron]

It's actually impossible to enroll other users for 2fa - as part of the process the need to get a secret for their authenticator app.

[danboid]

If users are expected to enrol themselves then an option to lock down the account so nothing can be done except setting that up would be excellent, or a create an option to prompt and force enrolment on first login. Whilst users can enrol themselves, they have no impetus to do so.

[jcameron]

That's a good suggestion! Unfortunately we don't yet have that capability ...