Login and SSO settings

Use case 1 (general): To improve security, an admin can force users to set up 2FA the next time they log in, and block them from accessing Front until it has been completed. The admin would need to set up their own 2FA first as a prerequisite. Use...

For instances where a teammate can't access a Front password recovery email from Outlook/Gmail directly, allow admins to reset the password on their behalf, and then share the password with the teammate. This allows them to gain access back to Fro...

Today there is no simple way for a teammate's login email to be updated from within the company settings. Editing the email could potentially trigger a notification to the user. There may be some cases where editing the login email is not permitte...

As an admin, I would like to set a policy to force my teammates to reset their Front login password on a regular basis

So that we can still receive 2FA code via phone number, in case of lost phone/replacement where we no longer have access to the Authenticator app.

Right now, users have to write into our Support team in order to disable Oauth login. It would be helpful and reduce bottleneck for users to be able to toggle this in settings, and for admins to be able to do it on their behalf.

It's confusing + bad UX for users to have to follow these specific instructions when copy + pasting DNS settings. Ideally, the "copy" option would be able to grab only the parts of the record that are needed. The current setup adds additional work...

Front does not allow you to toggle visibility of the password field when inputting credentials so it's always obscured. Sometimes this would be nice to have especially when pasting a password from a third-party password management app etc.

Ability for Google Workspace IdP to use Front's teammate templates in managing provisioning of users