Organization — Two-step login enforcement doesn't work #1078

New issue

Closed

opened 2026-02-20 08:07:20 -05:00 by deekerman · 2 comments

deekerman commented

2026-02-20 08:07:20 -05:00

Owner

Originally created by @guillaume-u on GitHub (Jul 10, 2021).

Even if I've set "Two-step login" enable in an organization policy.
New user (via an invitation) can join this organization without Two-Step login configured on their account.

Vaultwarden version: latest stable v1.22.1
Installed method : Build from source
Client : web vault

Steps to reproduce

Vaultwarden was started via "./vaultwarden" or via systemd.
Create a new organization
Set the policy "Two-step Login" to enable
Invite a new user (as "user" or "manager")
Create the new account (by following the invitation email) — without setting a two-step factor.
Accept the user in the organization.

Expected behaviour

A user without a Two-step login enabled, should not be able to join a organization with "Two-step login" setting enabled.

Actual behaviour

A user without a Two-step login enable can join an organization with "Two-step login" enabled.

Originally created by @guillaume-u on GitHub (Jul 10, 2021). Even if I've set "Two-step login" enable in an organization policy. New user (via an invitation) can join this organization without Two-Step login configured on their account. * Vaultwarden version: latest stable v1.22.1 * Installed method : Build from source * Client : web vault ### Steps to reproduce * Vaultwarden was started via "./vaultwarden" or via systemd. * Create a new organization * Set the policy "Two-step Login" to enable * Invite a new user (as "user" or "manager") * Create the new account (by following the invitation email) — without setting a two-step factor. * Accept the user in the organization. ### Expected behaviour * A user without a Two-step login enabled, should not be able to join a organization with "Two-step login" setting enabled. ### Actual behaviour * A user without a Two-step login enable can join an organization with "Two-step login" enabled.