Improved Two-factor Authentication for Backoffice Users
Umbraco 9.5 closes the loop on authentication improvements started for Members in Umbraco 9.3 by making many of the same concepts and features available for User 2FA.
As the login flow for the backoffice, and thereby much UX, is handled by Umbraco it is actually simpler to set up 2FA for Users than it is for Members. Much of the functionality you need is already present both for the back- and front-end but you of course still have extension points where you can add customized views and actions.
You will need to add one or more 2FA providers, such as Google or Microsoft Authenticator, and then much of the flow is handled, complete with the ability to enable and disable 2FA for a User. By making it much easier to implement 2FA it enables developers to deliver on an increasingly common requirement for installations and make it part of a seamless and secure login experience.
You can find extensive details on how to add, configure and implement 2FA for backoffice Users in the updated documentation, and/or watch the recent Umbracollab where Sebastiaan and friends implement 2FA using a different provider: