The two-factor authentication - or 2FA in short - is an additional security measure for user accounts. Using the option "Force two-factor login for all users" it is ensured that every user who did not yet sign up for 2FA will be forced to do so the next time they access the INETAPP server.
As per the two-factor authentication documentation, there are multiple factors available to choose from for configuration. If your users should use email codes, make sure, that the server is set up with a valid outgoing email configuration and that every user has an email address readily available in the Users and Groups application.
Note: Before activating this option, make sure that the prerequisites are met by the INETAPP server and the users. You should also inform your users about the measure beforehand.
This advanced option allows to whitelist IP addresses that will not require the second factor. You can add multiple IPv4 and IPv6 addresses, separated by comma or semicolon. It can be used to distinguish requests to the server from a public IP address or from an internal network or a DMZ.
The IP address has to be one of the binding IP addresses on which the server is running with its published ports.
Note: Since force 2FA is enabled, users will have to add a second factor the first time they access the service from a non-disabled IP address.
Note: Disabling the 2FA requirement for an IP implies that no accounts, even administrative ones, do not require the second factor when logging in. This option should be handled with extreme caution.