I wonder why Prismic has no support for two-factor authentication, except SSO in the much more expensive Platinum+ plan. Any SaaS vendor should have two-factor available by default for any plan (imo).
The risks are high: Hackers can make nasty changes to a website when they get their hands on a username + password. E.g., man-in-the-middle attacks where a hacker links to a ghost website and copies a login page.
The product team has been discussing the possibility of adding 2FA, and we’re planning to add it at some point in the future. However, it’s not on our immediate roadmap, so I can’t share an ETA.
At the moment, as you said before, 2FA is only available through SSO login that we can activate on Enterprise plans.
My two cents: well know security concern, every system which could be publicly accessed by a pirate must be protected by MFA. No question about given current times
@joost1 we don't have any news at the moment. You can get updates about all the features that we're working on on our progress page: What's new - Prismic
Not having 2FA is far from today's best practices.
And having been warned repeatedly about this (see above) and not acting on it, I believe now exposes you to a certain amount of legal responsibility should people's accounts be hacked due to lacking 2FA...
Hey @savio. We don't have any new updates on 2FA at this time. As mentioned before, it's only available through SSO login for Enterprise plans. However, you can still use the GitHub SSO signup option if you're not an Enterprise client.
