Skip to Main Content
Feature Request FR-1787
Status CLOSED

51 Voters

Ability to enable 2 Factor Authentication for login to the APEX Application Builder

jkerr Public
· Aug 20 2021

Idea Summary
Add an option in Workspace settings to enable requiring 2 Factor Authentication when developers are logging in to the APEX Application Builder page.

Use Case
Increase security

Preferred Solution (Optional)
Use either texting codes to a cell phone or mobile authenticator app

This request is likely a duplicate of FR-1950.

Comments

Comments

  • richard.j.hughes OP 2.7 years ago

    We have MFA on our APEX applications using Social Sign-in OpenID Connect/OAuth2 and PingID, this can be enabled on Workspace logins I believe

  • gemma wood OP 2.7 years ago

    This is an issue that has been raised by auditors to me in the past as why we have 2FA on our APEX apps but not on the builder.

  • richard.j.hughes OP 2.7 years ago

    CMMC 2.0 requirement for US Govt contracts, also other Government's have similar requirements for MFA

  • mhhm9 OP 2.7 years ago

    good  idea

  • fabiano teixeira OP 2.7 years ago

    Excelente ideia!!

    (Excelent idea!!)

  • andersonrf OP 2.7 years ago

    For this security issue I couldn't let APEX App Builder be acessible for the developers outside of the corporation.

  • gstuerner OP 1.5 years ago

    Hope this will come with  one of the next releases. It is really needed. Another small user-friendly piece would be a toggle for the password (visible/invisible).

  • jayson hanes Admin OP 1.5 years ago

    For those that don't know, this is possible today in APEX APPS - Pretty much any authentication mechanism such as this is possible today. It's just not an out-of-the-box declarative feature, which will be nice should it come to the product one day. The related/duplicate submissions shown above have this marked as roadmap.

  • jkerr OP 1.5 years ago

    Jayson, Can you add a reference on how to require 2FA when signing in to APEX Builder for all users admin and developers alike?  Note especially being able to require 2FA whereas if it is using an external auth provider it doesn't meet the objective because you can't be sure 2FA has been turned on by the user for the external provider.

    Joe

  • jayson hanes Admin OP 1.5 years ago

    You like seeing me with egg on my face eh? 

    Sorry. I meant for APEX apps, not so much on workspace sign-in, yet, except SSO.

  • fabio.ceron OP 10 months ago

    Jayson, is there any link or documentation that you can recommend on how 2FA can be done in Apex Apps?

  • jayson hanes Admin OP 10 months ago

    Hi @fabio.ceron this idea is linked to others that are “likely duplicates”. Within this one: https://apex.oracle.com/ideas/FR-1950

    there is a reply from Morten, where he links to https://apexutil.blogspot.com/2018/07/two-factor-authentication-with-apex.html

    Hopefully that helps.

  • jkerr OP 9 months ago

    Since this idea is for 2FA for APEX Builder, not Apps, it is not a duplicate.  Can it be un-tagged as a potential duplicate if it is? Is this in consideration?