How to Enable Role based 2FA for WordPress | Role based 2-Factor Authentication

Role-based two-factor authentication (2FA) is a security measure that applies different levels of authentication based on the roles or privileges of users within an organization or system. Instead of enforcing the same 2FA requirements for all users, role-based 2FA allows for a more flexible and tailored approach to authentication.

Follow these steps to Enable 2-Factor based on roles.

• Click on the miniOrange 2-Factor plugin and go to Login Settings tab.




• Now, the checkbox of all the roles is enabled by default so if you want to disable two factors for any user role just unselect for the particular role.
• Example- I have selected the checkbox for a particular user role namely Administrator, Author, Contributor, Subscriber.




• Click on Save Settings button.


• After this, whenever a user of selected role logs in to the WordPress site user will be asked for two-factor. And other users will log in normally.
• Note- We are providing 2-factor authentication for 3 users in the free version if you want to add it for more user, please upgrade to the paid version.

Specific set of authentication methods based on user role.

• Click on Specific Roles radio button and then click on particular user role and select Authentication Methods you want to configure for that role.
• Example- In the image below, I have chosen the Editor role and enabled different Two Factor methods.




• Page scoll down and click on Save Settings button.




• Now, whenever the selected role-based user is registering he will only see specific Authentication methods which are enabled for him by Admin.

Custom Redirect Login URL

• Go to the Select Roles to enable 2-Factor feature.




• Each user role has a Custom Redirect Login URL textbox so, edit that URL and click on the Save Settings button.
• Example- In the image below, I have Customized Custom Redirect Login URL for the Administrator role.


• Now when the Administrator user logs into the site the user will redirect to Custom Redirect Login URL page.

Additional Resources

• What is 2FA?
• Enable/reconfigure 2fa shortcode
• Role-Based 2FA
• WordPress Two-Factor Authentication?
• Comparison miniOrange 2FA VS WP 2FA ?
• Passwordless Login

Business Trial For Free

If you are looking for anything which you cannot find, please drop us an email on 2fasupport@xecurify.com