Disable allowRememberBrowser

[Echo]

i want to disable allowRememberBrowser because the users need to 2fa before logging in but i can’t find it.

[rueben.tiow]

Hi @Echo,

You should be able to force MFA every time your users log in by going to your Dashboard > Security > Multi-factor Authentication and selecting Always for your Require Multi-factor Auth policy.

Keep me posted on how this goes for you.

Thanks,
Rueben

[Echo]

Hi @rueben.tiow

Thank you for your quick reply.
I still get the 30 days function when selecting always.

Is there someting else i am maybe doing wrong?

[rueben.tiow]

Hi @Echo

Thanks you for your reply.

You might need to use a Post-Login Action to disable the allowRememberBrowser option.

For example:

exports.onExecutePostLogin = async (event, api) => {  
  api.multifactor.enable('any', { allowRememberBrowser: false });
}

See this documentation for your reference.

[Echo]

Thank you @rueben.tiow
It works, i added a custom action in the login flow and it works flawless!