Multi-Factor Authentication in Moodle

In the last video, I described some very dangerous plugins that, if installed by an admin account, can cause great damage to, well, everything. In this video, I look at Moodle's out-of-the-box Multi-Factor Authentication offerings and how they can be used to make your Moodle much more secure.

[@HCIKA4545]

Great video thank you

[@Wise-Cat]

Thanks for watching. Hope it helps

[@davidlawrey8741]

Great video I have a question can an Admin reset some MFA if they loose their phone for example?

[@Wise-Cat]

Yes, there are a few things I forgot to go into in that video, so I'll probably record a new one soon focusing more on implementation and management. I was pretty tired while recording that video... (sticking to that story haha).

[@rizkijunianto846]

Great video, i have a question about the authentication app factor, can admin register all user to force using authenticator apps instead of self registration through mfa preference?

[@Wise-Cat]

In a way, yes. The admin can choose which factors are available, and then set the Moodle to require certain factors. They're weighted too though so you could either allow only one factor, or require multiple other factors to authenticate.
However, this cannot replace self-registration, as these are authentication factors and not account creation factors (I know, the language makes it a bit confusing). Put another way, the account needs to exist first, before MFA factors can be added.
Hope this answers your question with more clarity and doesn't just trigger more confusion...