2-Step Verification

2-step Enrollment Process
  1. Have user log into Gmail on a PC/Mac/Chromebook.
  2. In Gmail, Click on their name/initial/icon button on top right.
  3. Click on the "My Account" button.
  4. Click on the Sign in & Security header.
  5. Scroll down to 2-Step Verification and click on it.
  6. Follow steps to enable 2-step with the user's phone number and complete it.

OPTIONAL STEPS (highly recommended for users with weak cell coverage within buildings)

To add phone as Google Prompt (much easier than using text codes that you manually have to type in)
  1. On the user's phone, have them download/install the Google app if they don't already have it.
  2. If on Android: have user add their FGSD account as a GMAIL account to the phone's Account settings (in phone's settings app) (if they've already set up the account on the phone previous to enabling 2-step, they'll need to remove the account from the phone, then re-add it).
    OR
    If on iOS: have user add their FGSD account to the Google app
  3. Go back to 2-step verification on the computer and enable steps to add phone as Google Prompt device.

TROUBLESHOOTING

My user lost their phone and is locked out of their account(FOR ADMINS ONLY)

Instruct your user to use one of their backup codes to sign in.
Backup codes are provided on their Sign-in verification page when they enroll in 2-Step Verification. These act as backup one-time passwords for use in case they lose their phone. We strongly suggest users to print or write down these codes and store them securely.
If your user has lost their phone and doesn't have their backup code, you can obtain a backup code for them via:

Admin console > Users > (select user) > Security > Show backup verification codes
My user didn't enroll in 2-Step Verification and is locked out of their account (FOR ADMINS ONLY)

Generate Backup code:
  1. Login to Google Apps admin console at “admin.google.com”.
  2. Open the user profile/ account from Dashboard > Users > Jojo Varghese
  3. Scroll down the user Profile/ account page and select “Show more”
  4. Scroll down slightly again and select “Security”
  5. In security tab you will see the 2-step verification for the user account.
  6. Select “show backup verification codes” and select “Generate new codes”.
  7. Now share only one code with the user so the user can use code to login the account and turn on 2-step authentication.

Login Steps for User:
  1. Login to the Google Apps mail account at “mail.google.com”
  2. Once you entered correct username and password, user can select the option to enter backup code.
  3. Enter the backup code we generated above/ or shared by the admin.
  4. After successful login user needs to immediately configure 2-step verification: Configure 2-step verification.
Creation date: 3/15/2018 12:24 PM ()      Updated: 5/14/2018 10:20 AM (izirdum)