Verify User’s Identity with Extra Security by Implementing Employee ID as Login Challenge
Login challenges are extra security features provided by google. Employee ID as an optional extra security question when user suspects that an unauthorized person is trying to access a user’s account. Google decides which extra security question is appropriate to present to a user.
Login challenges are the extra security questions that help to prevent illegitimate access to an account. Admin can add employee ID as an optional extra security question when it looks like an unauthorized person is trying to access a user’s account. To use an employee ID as a login challenge, first ensure that the user employee IDs are stored in the users' account attributes.
Follow the steps below:
✦ Update the employee IDs directly in the user profile from the Admin console.
✦ Use Google Cloud Directory Sync to export employee IDs from Microsoft Active Directory or from directory server to your Google organizational unit.
✦Use the CSV upload functionality in the Admin console.
When employee ID information is added to the organizational unit, let users know where they can find their employee ID and that they might be asked for when they sign in to their Google Account. Also the employee ID must only be used in official Google sign-in pages. If users prefer to verify their identity in another way, they should update their recovery phone number or email address.
Note: If SSO or 2-Step Verification for your users is turned ON, the employee ID login challenge isn’t presented.
Steps to Turn the employee ID login challenge on or off:
From Admin console Home page, go to SecurityLogin challenges.
On the left hand side select the organizational unit to set a login challenge(For all users, select the top-level organizational unit).
Then check or uncheck the User employee ID .
By default the setting for employee ID login challenge is off.
Click Override to keep the setting same, even if the parent setting changes.
If the organizational unit's status is already Overridden, Then choose below option:
Inherit— It reverts to the same setting as its parent.
Save—Saves the new setting (even if the parent settings are changes).