Google TFA information

[Alex Burton]

Hi All,

Has anyone ever explored getting types of TFA information that users in Gsuite are using? I can see from the Reports API that some commands are there

 (https://developers.google.com/admin-sdk/reports/v1/appendix/activity/login#login_verification) 

But with limited knowledge of transposing this into GAM im at a loss.  Ideally we would like to pull a list of users that use Google Athenticator or the type of TFA everyone uses.

Help as always would be greatly appreciated.

Thanks!

[Jay Lee]

+Ashish (combing threads)

Ah, I see now. No, there's no way to tell if the user is using Google Authenticator, Microsoft's app, Authy or something else. The user just scans the code which configures the TOTP, nothing is reported back to Google in terms of which app they use.

What's the use case here? Usually you just want to know if user is using SMS / Phone auth (least secure), Google Authenticator (TOTP), Google Push or Security Key (most secure).

Jay Lee

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/c43155d3-8e53-4c75-8d1f-801544a41103n%40googlegroups.com.

[Alex Burton]

Hi Jay,

Yes, that’s exactly the use case. We are trying to find out if a user is using Push, Yubikey, Smartlock or Authenticator (or a combination of the above)  Is that possible?

Thanks,

[Jay Lee]

Why is it a concern? 

On Fri, Apr 16, 2021, 8:36 AM Jay Lee <jay...@gmail.com> wrote:

No

On Fri, Apr 16, 2021, 8:12 AM Alex Burton <alex....@acquia.com> wrote:

Hi Jay,

Yes, that’s exactly the use case. We are trying to find out if a user is using Push, Yubikey, Smartlock or Authenticator (or a combination of the above)  Is that possible?

Thanks,

Alex Burton
ACQUIA
System Administrator
m: 0118 370 3444 | e: alex....@acquia.com
The White Building, 33 Kings Rd | Reading, Berkshire, RG1 3AR UK
/ WE ARE THE OPEN SOURCE DIGITAL EXPERIENCE COMPANY.

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/zd4IEv3SlNw/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp9o%3Dckx6HqTuQ%2B5%3DKzXbcOdbFHqk4BtrD5mxnOyxWXa6Q%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/F9C2853B-A9D1-4A9B-A6CC-4D92F84F7008%40acquia.com.

[Jay Lee]

No

On Fri, Apr 16, 2021, 8:12 AM Alex Burton <alex....@acquia.com> wrote:

Hi Jay,

Yes, that’s exactly the use case. We are trying to find out if a user is using Push, Yubikey, Smartlock or Authenticator (or a combination of the above)  Is that possible?

Thanks,

Alex Burton
ACQUIA
System Administrator
m: 0118 370 3444 | e: alex....@acquia.com
The White Building, 33 Kings Rd | Reading, Berkshire, RG1 3AR UK
/ WE ARE THE OPEN SOURCE DIGITAL EXPERIENCE COMPANY.

On 16 Apr 2021, at 11:46, Jay Lee <jay...@gmail.com> wrote:

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/zd4IEv3SlNw/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp9o%3Dckx6HqTuQ%2B5%3DKzXbcOdbFHqk4BtrD5mxnOyxWXa6Q%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/F9C2853B-A9D1-4A9B-A6CC-4D92F84F7008%40acquia.com.