I have a GCP project where I work with people external to my team. For the moment I assigned them Cloud IAM roles, in order to give them permissions to different parts of the project.

But I was asking myself if is it possible to force those users to have 2FA activated on their accounts. Is that possible?


You can enable 2-factor authentication (2FA) for Google accounts. And You can find more information in this following document. Keep in mind Google Cloud Project does not have an isolated service to enforce 2-Step Verification for the accounts of a project. However, there is a feature request on our side. Instead, Cloud Identity offers the identity services and endpoint administration that are available in G Suite as a stand-alone product. As an administrator, you can use Cloud Identity to manage your users, apps, and devices from a central location—the Google Admin console.

You can set up Cloud Identity as an administrator by following these steps.

Also, I invite you to take a look at this thread on StackExchange that explained about the difference of2-step verification" and 2 factor authentication.

  • Thanks for the answer, it covers in more detail options I found before asking here. I think I have to explore more deeply Cloud Identity to see if it matches all needs. The extra link at the end of the answer was very helpful to understand differences between 2fa and 2 step. Thanks! – R.Sicart Nov 11 '18 at 14:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.