Hey all! Do you guys know if there is any way as a...
# community-help
m
Hey all! Do you guys know if there is any way as an admin user in cloud typesense to enforce MFA for all the users having access to it?
j
We don't have a way to enforce MFA, it's optional for all users
m
@Jason Bosco Is there any way we can see the team list and if they have MFA enable or not? for example:
j
Yup, we just pushed out a new section to the team account page where you can see team members' 2FA status
m
Great, is there any link you can share with me that has this view? All I see is this one:
I ask because we are trying to get SOC2 certified, as part of the process we are requested to share the SOC2 of Typesense, is there any part I can see the compliance reports?
j
If you scroll down further on that page you’ll see the 2FA section
For SOC2 reports, we haven’t included the additional compliance costs on our side, in to our cluster pricing. So we’ve bundled it instead into our business and enterprise support plans. Once you subscribe to one of those plans, if you email security@typesense.org we can share our SOC2 report with you.
m
Got it, I see only myself here, I think a super admin will see the full list? Got it I think we have a free support plan according to the image?
and finally from here I cannot set up MFA, where can I set it up?
j
The list only shows users who use email/pwd auth directly on typesense cloud. In your case looks like the other users use github auth for which we don’t manage 2FA for.
To setup 2FA, you want to use the account switcher on the top right, switch to your personal account, then open the account page and you’ll the option to enable 2FA
m
Thank you @Jason Bosco One last question, is there any security document accesible in free support tier in Typesense we can use instead of the SOC2 report?
j
This is our publicly available security documentation: https://cloud.typesense.org/security
1