Removing an MFA factor and resetting the verification date
Note
This feature is at the Preview stage.
An organization administrator can view the last verification date of federated and local user accounts. In some cases, an administrator may also need to reset the verification date of a user account or remove its authentication factor.
Note
You can look up the date of a user's last verification with the MFA factor on the Overview tab of the user information page in the Cloud Center Identity Hub interface.
Resetting the user account verification date
To reset a user account verification date, you need the organization-manager.federations.userAdmin role or higher (for federated accounts) or the organization-manager.userpools.userAdmin role or higher (for local accounts).
To reset a user's verification date:
- Log in to Yandex Identity Hub.
- In the left-hand panel, select Users and select the federated or local user.
- In the top-right corner, click More and select Reset verification date.
- In the window that opens, confirm the operation.
The user's verification date will be updated to the current date.
Removing a user account authentication factor
You can remove an existing authentication factorfrom a user account if you either have the organization-manager.federations.userAdmin role or higher (for federated accounts) or the organization-manager.userpools.userAdmin role or higher (for local accounts).
To remove an existing authentication factor from a user account:
- Log in to Yandex Identity Hub.
- In the left-hand panel, select Users and select the federated or local user.
- Go to the MFA tab.
- In the row with the user's authentication factor, click and select Delete.
- Confirm the deletion.
The user's authentication factor will be deleted, and the user will need to complete the verification again during the next authentication in Yandex Cloud.