# kindgi sign-in

> The workspace's sign-in settings: whether signing in takes a second factor

## `kindgi sign-in`

**Synopsis**

```sh signature
kindgi sign-in <command>
```

The workspace's sign-in settings: whether signing in takes a second factor.

**Commands**

| Command                                                                                                      | Description                                                                                                                                            |
| ------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| [`kindgi sign-in settings`](https://docs.kindgi.com/v0.1.9/reference/cli/sign-in.md#kindgi-sign-in-settings) | The workspace's sign-in settings; `--require-second-factor=on` makes signing in take a second factor (an authenticator app), `off` stops requiring it. |

**See also**

- [Turn on sign-in](https://docs.kindgi.com/v0.1.9/deploy/self-hosted/sign-in.md)

### `kindgi sign-in settings`

**Synopsis**

```sh signature
kindgi sign-in settings [--require-second-factor=on|off]
```

The workspace's sign-in settings; `--require-second-factor=on` makes signing in take a second factor (an authenticator app), `off` stops requiring it. Once on, a session made without one ends at its next request, and signing in to the console with an API token is refused. Signing in through the workspace's own identity provider is exempt: it owns MFA there. A site's people sign in through the site, which owns their second factor, so the setting doesn't apply to them. API keys aren't covered: keep them to service accounts, and rotate them. Turning it on when signed in takes a sign-in made with your own second factor. Tenant admins only.

**Options**

| Option                            | Default                          | Description                                              |
| --------------------------------- | -------------------------------- | -------------------------------------------------------- |
| `--require-second-factor <value>` | unchanged: the settings are read | `on` or `off`: whether signing in takes a second factor. |

Every command also takes the [global flags](https://docs.kindgi.com/v0.1.9/reference/cli.md#global-flags).

**Examples**

See whether signing in takes a second factor.

```sh
kindgi sign-in settings
```

Require a second factor at sign-in (set up your own first).

```sh
kindgi sign-in settings --require-second-factor=on
```

From [Turn on sign-in](https://docs.kindgi.com/v0.1.9/deploy/self-hosted/sign-in.md):

```sh
npx --yes @kindgi/cli@0.1 sign-in settings --require-second-factor=on
```

**See also**

- [Turn on sign-in](https://docs.kindgi.com/v0.1.9/deploy/self-hosted/sign-in.md)
- [`kindgi sign-in`](https://docs.kindgi.com/v0.1.9/reference/cli/sign-in.md#kindgi-sign-in)