Login Challenge On/Off

112 views
Skip to first unread message

Frank

unread,
May 10, 2019, 2:18:23 PM5/10/19
to GAM for G Suite
Is there a way to turn the Login Challenge on/off of a users profile?

Thanks

Jay Lee

unread,
May 10, 2019, 2:22:55 PM5/10/19
to google-ap...@googlegroups.com
No though you can set things like Employee ID / Student ID with GAM which can then be used as the login challenge:


for some, this may be easier and more reliable than phone verification.

On Fri, May 10, 2019 at 2:18 PM Frank <fr...@umbrellabs.com> wrote:
Is there a way to turn the Login Challenge on/off of a users profile?

Thanks

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/01cd23cb-971f-4336-97ad-0071562fcd7e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Frank

unread,
May 10, 2019, 2:24:23 PM5/10/19
to GAM for G Suite
I see -- I just wanted a way to turn it off completely -- we have some terminated users and this makes it hard to terminate them going through the console (which is really slow)


On Friday, May 10, 2019 at 1:22:55 PM UTC-5, Jay Lee wrote:
No though you can set things like Employee ID / Student ID with GAM which can then be used as the login challenge:


for some, this may be easier and more reliable than phone verification.

On Fri, May 10, 2019 at 2:18 PM Frank <fr...@umbrellabs.com> wrote:
Is there a way to turn the Login Challenge on/off of a users profile?

Thanks

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

Jay Lee

unread,
May 10, 2019, 2:29:26 PM5/10/19
to google-ap...@googlegroups.com
Turning it off would put your users at risk of brute force account hacking...

Why do you need to login to their account during termination? Ideally you'd just use solutions like Vault and the APIs to export / move their data after termination...

Jay

On Fri, May 10, 2019 at 2:24 PM Frank <fr...@umbrellabs.com> wrote:
I see -- I just wanted a way to turn it off completely -- we have some terminated users and this makes it hard to terminate them going through the console (which is really slow)

On Friday, May 10, 2019 at 1:22:55 PM UTC-5, Jay Lee wrote:
No though you can set things like Employee ID / Student ID with GAM which can then be used as the login challenge:


for some, this may be easier and more reliable than phone verification.

On Fri, May 10, 2019 at 2:18 PM Frank <fr...@umbrellabs.com> wrote:
Is there a way to turn the Login Challenge on/off of a users profile?

Thanks

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/a8833eba-f7aa-4d59-b681-fa9bf276a4c4%40googlegroups.com.

Frank

unread,
May 10, 2019, 2:34:41 PM5/10/19
to GAM for G Suite
That would be ideal -- but we have a request to always have a PST upon termination, so we have to export it through Outlook each time


On Friday, May 10, 2019 at 1:29:26 PM UTC-5, Jay Lee wrote:
Turning it off would put your users at risk of brute force account hacking...

Why do you need to login to their account during termination? Ideally you'd just use solutions like Vault and the APIs to export / move their data after termination...

Jay

On Fri, May 10, 2019 at 2:24 PM Frank <fr...@umbrellabs.com> wrote:
I see -- I just wanted a way to turn it off completely -- we have some terminated users and this makes it hard to terminate them going through the console (which is really slow)

On Friday, May 10, 2019 at 1:22:55 PM UTC-5, Jay Lee wrote:
No though you can set things like Employee ID / Student ID with GAM which can then be used as the login challenge:


for some, this may be easier and more reliable than phone verification.

On Fri, May 10, 2019 at 2:18 PM Frank <fr...@umbrellabs.com> wrote:
Is there a way to turn the Login Challenge on/off of a users profile?

Thanks

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

Jay Lee

unread,
May 10, 2019, 2:50:24 PM5/10/19
to google-ap...@googlegroups.com

On Fri, May 10, 2019 at 2:34 PM Frank <fr...@umbrellabs.com> wrote:
That would be ideal -- but we have a request to always have a PST upon termination, so we have to export it through Outlook each time

On Friday, May 10, 2019 at 1:29:26 PM UTC-5, Jay Lee wrote:
Turning it off would put your users at risk of brute force account hacking...

Why do you need to login to their account during termination? Ideally you'd just use solutions like Vault and the APIs to export / move their data after termination...

Jay

On Fri, May 10, 2019 at 2:24 PM Frank <fr...@umbrellabs.com> wrote:
I see -- I just wanted a way to turn it off completely -- we have some terminated users and this makes it hard to terminate them going through the console (which is really slow)

On Friday, May 10, 2019 at 1:22:55 PM UTC-5, Jay Lee wrote:
No though you can set things like Employee ID / Student ID with GAM which can then be used as the login challenge:


for some, this may be easier and more reliable than phone verification.

On Fri, May 10, 2019 at 2:18 PM Frank <fr...@umbrellabs.com> wrote:
Is there a way to turn the Login Challenge on/off of a users profile?

Thanks

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/4776f36e-e96a-47ab-ad59-3ebcd6ffbea3%40googlegroups.com.

Andrew Mervis

unread,
May 13, 2019, 7:45:17 AM5/13/19
to GAM for G Suite
We've never found the Employee ID challenge useful because populating that value makes it public for the org. We use a hidden variable instead, which allows you to see your own ID# if you need to look it up in Contacts, but that's it. 

Is there something we're missing?


On Friday, May 10, 2019 at 2:22:55 PM UTC-4, Jay Lee wrote:
No though you can set things like Employee ID / Student ID with GAM which can then be used as the login challenge:


for some, this may be easier and more reliable than phone verification.

On Fri, May 10, 2019 at 2:18 PM Frank <fr...@umbrellabs.com> wrote:
Is there a way to turn the Login Challenge on/off of a users profile?

Thanks

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages