Set up two-factor authentication with Google sign-in

Require two-factor authentication (2FA) for your team by having them sign in with Google and enforcing 2-Step Verification on their Google accounts. Google handles the second factor and Storeganise handles access, so sign-in stays quick and you manage one set of credentials. Use this setup to secure the Management Portal, or if a security review requires 2FA for staff.In this article

Before you start

You need:
  • A Storeganise profile for each staff member with an admin role. See Adding and managing team members. Google sign-in matches by email and doesn't create accounts, so anyone who isn't already a team member can't log in.
  • A Google account for each person, using the same email address as their Storeganise profile
  • Admin access to your Google Workspace, if you want to enforce 2-Step Verification for the whole team

Enable Google sign-in

Follow Set up Google single sign-on (SSO) to create your client ID and share it with Storeganise support.You can enable Google sign-in for the Management Portal, the Customer Portal, or both. For staff security, the Management Portal is the one that matters.

Enforce 2-Step Verification in Google

Enforce 2-Step Verification in Google so every staff member is prompted for a second factor.
Google Workspace
  1. Go to the Google Admin console.
  2. Go to Security > Authentication > 2-Step Verification.
  3. Select the organizational unit that contains your Storeganise staff.
  4. Select Allow users to turn on 2-Step Verification.
  5. Set Enforcement to On and choose a start date.
  6. Click Save.
Personal Google accounts
If your team uses personal Google accounts instead of Google Workspace, each person turns on 2-Step Verification at myaccount.google.com > Security. You can't enforce it centrally, so ask staff to confirm when it's done.

Turn off password login

Google's 2-Step Verification applies whenever staff sign in with Google. To make that the only way in, contact Storeganise support and ask us to disable password login for your instance. If you'd rather keep a fallback, password login can stay on alongside Google sign-in.

Note: Confirm that every admin can sign in with Google before you send the request. With password login off, a staff member who can't use Google sign-in is locked out, and Storeganise can't restore access to a locked account.

Check the setup

Ask each staff member to log out and sign in with Sign in with Google. They're prompted for their second factor on a new device.

Every staff member signs in with Google and is asked for a second factor. If you turned off password login, the login page offers Google sign-in only.

Who this applies to

This setup secures your team's access to the Management Portal. Customers choose their own sign-in method on the Customer Portal, whether that's Google, a password, or an email code. See Passwordless access in the Customer Portal for how email codes work.
Jump to
Related articles
Adding and managing team members
Troubleshooting admin login issues
Set up two-factor authentication with Google sign-in