Question

You administer an Enterprise Managed Users (EMU) instance for a financial services company. Compliance requires that every developer be protected by two-factor authentication. Your security team asks you to configure and enforce 2FA for all managed users directly in the GitHub enterprise settings. What should you tell them about implementing this requirement?

Accepted Answer

2FA cannot be configured within GitHub for EMU accounts; authentication and any multi-factor requirements are handled entirely by the configured identity provider.

Answer

Enable the 'Require two-factor authentication' organization policy for each organization in the enterprise to force managed users to register a second factor in GitHub.

Answer

Turn on the enterprise-level 2FA enforcement setting, which will prompt all managed users to enroll a TOTP app on next sign-in.

Answer

Have each managed user enable 2FA under their own personal security settings, then run an audit to confirm compliance.