If an employee has Two-factor authentication (2FA) set up and loses their backup codes, or can't get the authentication to work. Only a domain owner can remove the 2FA settings for the impacted Identity user. You can enable this option by claiming your company's domain.
How do I become the owner of a domain?
If you want to be a domain owner and disable 2 Factor Authentication from individuals in your organization you can follow the steps below:
You will need to go to https://identity.accessacloud.com/manage/domains.
Within this page you will need to:
Press Add Domain.
Add the Domain Name ending of the company email address (e.g @theaccessgroup.com)
Save Changes.
Create a Notepad on your PC or a Txt file with the below lines:
Host: @
Type: TXT
Value: The entire verification code from the Domains page.
sample below:
Send this to your IT team to add this to your DNS Record and Email Domain Control
Once it has been added to the DNS Record, the domain should appear in the Verified Domain list.
If verification is unsuccessful, confirm the TXT record has been added to your domain DNS correctly and that this change has fully propagated before attempting verification again.
If verification is successful, you have now confirmed ownership of your email domain and are now able to create a Security Policy to apply to your users.
Share
How do I add Domain Owners?
This can only be performed by the current domain owner. If you are the current domain owner, you can follow the steps below:
You will need to go to https://identity.accessacloud.com/manage/domains.
Under Verified domains, click on the edit button
Under Owners, type the new owner's email address and press enter
Click Saved Changes button
After saving, the owners will now be visible
The recently added owner can now login to https://identity.accessacloud.com/manage/domains and manage the domain as well.
How to remove Domain Owners
This can only be performed by the current domain owner. If you are the current domain owner, you can follow the steps below:
You will need to go to https://identity.accessacloud.com/manage/domains.
Under Verified domains, click on the edit button
Under Owners, Click on the X icon next to the user you want to remove
Click Saved Changes button
After saving, the owners list will be updated.
The owner that was removed will no longer be able to see this domain or manage it from their Identity login account.
Remove 2FA from the employee account
If an employee has Two-factor authentication (2FA) set up and loses their backup codes, or can't get the authentication to work. Only a domain owner can remove the 2FA settings for the impacted Identity user and a domain must be claimed before you see this option.
If the organisations domain has been verified, the domain owner needs to sign into https://identity.accessacloud.com/.
Select My Account then click Two-Factor Authentication.
Click Disable for someone else then enter the users email address.
Click Save.
Note: You can add or remove owners from the same My account area.
Frequently Asked Questions
How do I know how if I am a domain owner?
You can login to https://identity.accessacloud.com/manage/domains. If you are able to see the option to disable for someone else at the bottom, it means that you are the domain owner
After adding or removing a domain owner, how long do I wait for it to take effect?
It should take effect after saving the changes.