Skip to content

TPA-RFC-46: GitLab 2FA

Summary: enforce 2FA in the TPA group in GitLab on Tuesday, 2 day grace period

Background

GitLab groups have a setting to force users in the group to use 2FA authentication. The actual setting is labeled "All users in this group must set up two-factor authentication".

It's not exactly clear what happens when a user is already a member and the setting is enabled, but it is assumed it will keep the user from accessing the group.

Proposal

Enable the "enforce 2FA" setting for the tpo/tpa group in GitLab on Tuesday January 17th, with a 48h grace period, which means that users without 2FA will not be able to access the group with privileges on Thursday January 19th.

References

Metadata: