Two-factor policy Off — hidden from employee profiles Optional — employee chooses Required — all employees must use 2FA @error('two_factor_policy')

{{ $message }}

@enderror

Default method (when required) Email OTP — auto-enabled on first login Authenticator app — setup at login

Used when policy is Required and the employee has not enrolled yet.

Switching policy to Off clears 2FA for all employees in your company.

@error('two_factor_default_method')

{{ $message }}

@enderror