Two-factor authentication

Regarding to the comment:

The majority of our customers use a SSO provider to log in to Sisense

It's not true in our case. Almost all customers don't use SSO because they are using the tool for internal purposes only.

Best.

2FA is not currently on the product roadmap. The majority of our customers use a SSO provider to log in to Sisense, and currently our resources are focused on other projects that will impact greater portions of our users.

Well, that was just being lazy and passing on the responsibility to the end user for keeping the data secure. As a service provider, do you not feel even a little bit responsible for the platform's security? Am happy that this is getting another look.

In light of the recent breach, I would hope that platform security will be a priority and this feature gets the attention it deserves. Like most of the folks above, a setup that allows enabling MFA per user or a group of users or for one or more roles or for all the org would be ideal but will take what we can get quickly enough. 

Any updates on the roadmap status for this? Seems to be long time ago, there was a commitment to implementing it...

Hi,

I’m happy to share that Two-Factor Authentication (2FA) is currently in active development and is planned for release in early 2026. (We will, of course, do our best to deliver it sooner if possible!)

I would like to share the major implementation concepts:

1. Who is this for?
   2FA will apply to native Sisense users only - those created in Sisense Admin and who log in with a Sisense username and password.
   Active Directory (AD) or Single Sign-On (SSO) users will be excluded. This is intentional, as their authentication (including any MFA) is configured and managed by their external identity provider.
2. Where will it be available?
   2FA will be available for both cloud and on-prem deployments, as long as an email server is configured for your instance.
3. What is the second factor?
   The second factor will be a secure, one-time code sent to the user’s email.
   Support for other methods (such as authenticator apps or SMS) is not planned at the moment.
4. How will I control the rollout?
   This was a key part of your feedback. To ensure a smooth rollout and flexible control, we are implementing two levels of management:
   • System-Level Toggle: The master switch that enables or disables 2FA across your entire deployment.
   • User-Level Configuration: Determines whether 2FA is required for an individual user.

Admins will be able to manage individual user configurations through a “Require Two-Factor Authentication” control in the Users list (GUI) or via the API.
The default value will be ON, allowing easy and secure enablement for the majority of users while still providing flexibility for exceptions (e.g., system, integration, or QA accounts).

Hello Everyone,

Thank you for all the feedback around two-factor authentication.

2FA is not currently on the product roadmap. The majority of our customers use a SSO provider to log in to Sisense, and currently our resources are focused on other projects that will impact greater portions of our users.

We may revisit this in the future though, so keep an eye out for it in the future.

Thank you,

Hi,

You can see that CDT already had this feature in the tool's core. 

https://dtdocs.sisense.com/article/two-factor

Best

Hi piyushrajput.

We appreciate your feedback, but please refrain from using insulting language.