Security key enforcement launched in January 2017 and allows a G Suite Enterprise domain admin to enforce the use of security keys as a two-step verification (2SV) option to protect users against phishing. In addition to security key enforcement, G Suite domain admins can also use other 2SV methods such as the Google Authenticator app, text messages, or phone calls. To make 2SV deployment easier in your domain, we've added two new options in the Admin console.

Admin-led security key enrollment for end users
G Suite Business and Enterprise admins can now enroll security keys on behalf of their users. After navigating to the User page from Admin console, click ADD NEW KEY and add a new security key using the standard security key enrollment process.


2SV enrollment periods
Previously, whenever a new user was created in an organizational unit where 2SV was enforced, that user had to use 2SV from his or her first login. Admin feedback has told us that enrollment periods would help in onboarding users to 2SV more efficiently.


Going forward, G Suite admins can specify an enrollment period during which newly created users can sign in with just their passwords and complete their 2SV setup.

To learn more, check out our updated Set up 2-Step Verification guide in the Help Center.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:

• Enrolling security keys on behalf of users available to G Suite Business and Enterprise editions only
• Specifying 2SV enrollment periods available to all G Suite editions

Rollout pace:
Full rollout (1-3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center



Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates