Not all users and all scenarios require 2FA to be enabled for every login. When running inside of a closed network without external proxy access, 2FA requirements might have already been met by existing organizational policies and controls. There should be an option to disable 2FA requirement on login globally and on a per user basis.
Specific use cases include the default root admin. 2FA token generating apps cannot generally be shared across multiple admins. The default root admin account should have the option to be locked down with a password only which is protected by administrators in case there is a need to replace or add org admins.
Not all users and all scenarios require 2FA to be enabled for every login. When running inside of a closed network without external proxy access, 2FA requirements might have already been met by existing organizational policies and controls. There should be an option to disable 2FA requirement on login globally and on a per user basis.
Specific use cases include the default root admin. 2FA token generating apps cannot generally be shared across multiple admins. The default root admin account should have the option to be locked down with a password only which is protected by administrators in case there is a need to replace or add org admins.
Scope of feature: