📖 Definition

The "Disable 2-Step Verification" action allows Google Workspace administrators to remotely turn off two-step verification (2SV) for a specific user. This can be essential in urgent access recovery scenarios where a user is locked out and unable to complete the second step of authentication, or when an organization needs to temporarily bypass 2SV requirements.

Key capabilities include:

• Disabling 2-step verification for users who have lost access to their verification methods,
• Providing quick administrative override in time-sensitive situations,
• Supporting account recovery and user onboarding processes,
• Enabling smoother transitions during changes to security policies.

🎯 Example Use Cases

User Locked Out After Losing 2FA Device

An employee loses access to their phone or authenticator app and can’t complete 2-step verification. Admins can disable 2SV temporarily to help them regain access quickly.

Emergency Access During Business Travel

A user traveling overseas forgets their 2FA device and cannot log in. The admin disables 2SV temporarily to ensure the user can still work without disruption.

Onboarding Temporary or Contract Workers

During onboarding, you may need to disable 2SV for temporary users who will not be using it during their short engagement period.

Resetting or Reconfiguring 2SV Setup

When a user needs to reset or change their two-step verification method, disabling 2SV first ensures a clean configuration process.

📥 Inputs

1. Connection

   This field defines how Zenphi connects to your Google Workspace environment in order to perform administrative tasks securely.

   Details: You must set up a Google Workspace Administration connection, which uses a service account with domain-wide delegation. This connection allows Zenphi to act on behalf of your admin account and disable 2-step verification for users in your domain.

   Credential Requirement: You’ll need to upload a JSON credential file for the service account.

   Setup Guide: How to Create a Google Workspace Administration Connection

   This connection acts like a secure gateway, authorizing Zenphi to manage user settings in your organization.

2. Id or Email of the User

   The unique identifier for the user whose 2-step verification you want to disable.

   Details: You can enter:

   • The user’s primary email address (e.g., [email protected]),
   • An alias email address, or
   • The user’s unique Google Workspace ID.

   Where to Get It:You can retrieve this information from the output of other Zenphi actions like:

   • Create User

   • Update User

   • Lookup User Information

   This flexibility helps ensure you can easily reference the correct user, no matter how your flow is structured.

💡 Example

Helping a User Regain Access After Losing Their 2FA Device

**Scenario:**Sarah, an employee, is unable to log in to her Google Workspace account because she lost her phone, which was used for two-step verification. As the admin, you need to quickly disable her 2-step verification so she can access her account without waiting for a replacement device.

Steps to Set Up in Zenphi:

1. Add the "Disable 2-Step Verification" action to your flow.

2. Configure the inputs:

   • Connection: Use your Google Workspace Administration connection (ensure it's set up with the correct service account credentials).
   • Id or Email of the User: Enter Sarah's email address (e.g., [email protected]) or her unique user ID.

3. Run the flow: This will disable 2-step verification for Sarah's account, allowing her to log in without needing to complete the second authentication step.

4. Communicate with the User: Let Sarah know that 2-step verification has been temporarily disabled and that she can now log in. Afterward, she can re-enable 2-step verification once she gets a new device or authentication method.

**Outcome:**Sarah successfully logs into her Google Workspace account, and you’ve resolved the issue without needing to wait for the recovery of her 2FA device.