GAT Flow is a User Management tool for Google Workspace users. It allows the Admin of the domain to make bulk changes on the user accounts.
One of the options available is to Disable two-step verification
Create workflow #
First, navigate to Flow > Create workflow (1).
Workflow type #
In the Workflow fill in the details. You can set it up also as an Event workflow or Recurring workflow.
- Name – enter the name of the workflow (2)
- Description – enter a description for the workflow (optional)
- Type – select what workflow type you would like to run
- Modify – modify existing users (3)
- Include suspended users – enable or disable to allow you to select users who are currently suspended:
- If enabled – you will be able to select even users who are suspended
- If disabled – you will be able to select only users who are active
- Run immediately after approval – provides an option to schedule the workflow to run in a selected future time (optional)
Later click Next (4) to proceed.
Search for a user #
In the “Search for a user” pick the user that you want to “disable the two-step verification for”.
Action on bulk users #
Select Multiple users to remove the 2-Step Verification from multiple users in bulk.
- Search for a user – pick user individually
- Search for a group – select group of users
- Search for an OU – select org. unit of users
- Next – click to proceed further
Choose actions #
In the Choose actions click on the (+) button (1) and then click the Add action button (2)
From the menu on the left find “Disable 2-Step Verification” from the User’s set of actions.
Select “Disable 2-Step Verification” (2). This will be added as an action to be taken. Click on “Send approval request” (3).
Security officer #
The security officer will receive an email notification for approval as below.
This will lead the Security officer to the Approval screen. As the request is approved, the workflow will be set to run.
Result #
The Workflow job will be completed, the result can be viewed in the Workflow.
Result in GAT+ #
Navigate to GAT+ > Users > Security > filter by 2 factor auth.
The accounts will have “2-factor auth” as “yes” when the 2-Step Verification is enabled.
The accounts will have “2-factor auth” as “no” when the 2-Step Verification is removed.
