Two-factor authentication

Hi,

I’m happy to share that Two-Factor Authentication (2FA) is currently in active development and is planned for release in early 2026. (We will, of course, do our best to deliver it sooner if possible!)

I would like to share the major implementation concepts:

1. Who is this for?
   2FA will apply to native Sisense users only - those created in Sisense Admin and who log in with a Sisense username and password.
   Active Directory (AD) or Single Sign-On (SSO) users will be excluded. This is intentional, as their authentication (including any MFA) is configured and managed by their external identity provider.
2. Where will it be available?
   2FA will be available for both cloud and on-prem deployments, as long as an email server is configured for your instance.
3. What is the second factor?
   The second factor will be a secure, one-time code sent to the user’s email.
   Support for other methods (such as authenticator apps or SMS) is not planned at the moment.
4. How will I control the rollout?
   This was a key part of your feedback. To ensure a smooth rollout and flexible control, we are implementing two levels of management:
   • System-Level Toggle: The master switch that enables or disables 2FA across your entire deployment.
   • User-Level Configuration: Determines whether 2FA is required for an individual user.

Admins will be able to manage individual user configurations through a “Require Two-Factor Authentication” control in the Users list (GUI) or via the API.
The default value will be ON, allowing easy and secure enablement for the majority of users while still providing flexibility for exceptions (e.g., system, integration, or QA accounts).