RTE and authentication · Question 10 of 12
Administrators should be required to set up two-factor authentication in the backend, editors should not. Which statements are true?
2 answers are correct. Medium
Show answer
Answer
- C With User TSconfig auth.mfa.required = 1 it can be set differently for individual users or groups
- D $GLOBALS['TYPO3_CONF_VARS']['BE']['requireMfa'] = 3 requires MFA only for administrators
Explanation
requireMfa knows 0 (off), 1 (all), 2 (only non-administrators), 3 (only administrators) and 4 (only system maintainers). If auth.mfa.required is set in the User TSconfig, it takes precedence over the global setting. Affected users must first set up a provider such as TOTP after logging in.