Skip to main content
Enable 2FA for individual employees

How to switch on two-factor authentication (2FA) for individual employees.

Oliver Cook avatar
Written by Oliver Cook
Updated over a week ago

If you've enabled two-factor authentication (2FA) this means your employees are required to enter a one-time passcode as well as their login details.

It's possible to select individual employees to require using 2FA when they log in.

📎NOTE: Once you enable 2FA for someone, it can't be disabled for them, only reset.


Enable 2FA for an employee

Option 1 - Employee profile

You can control whether an employee needs to use 2FA from with Personal settings in an employee's profile.

  1. Log in to Sage HR as an admin user.

  2. Go to the employee's profile.

    You can either search for them or from the main menu on the left, click Company then click the relevant employee profile.

  3. On the Employee tab of the profile menu, scroll to the bottom and click Personal settings.

  4. Select the requirement option.

    📎NOTE: Once enabled and you save settings, even if you untick this option later the employee will still be required to use 2FA when they log in.

  5. Click Save.

Option 2 - 2FA settings

You can control whether an employee needs to use 2FA from within your general 2FA settings.

  1. Click on your name on the top right, then click Settings.

  2. On the settings menu click Security, then click Sage accounts and two-factor authentication.

  3. Under Manage two-factor authentication, click Select employee.

  4. Click Specific employees, then select relevant employees.

    📎NOTE: Once enabled for an employee and you save settings, even if you untick this option later the employee will still be required to use 2FA when they log in.


  5. Click Save.


📎NOTE: If you don't have these options because you haven't enabled 2FA for the company, the reason the employee may be required to use 2FA could be they have another employer who has enabled 2FA for their login to Sage HR.

Alternatively, their Sage account may be used for other Sage products which require 2FA to access them.

Did this answer your question?