Using 2FA protects from unauthorised access to a person's account and increases data security.
Due to Xero requirements, ApprovalMax enforces 2FA for all users who access Xero-connected Organisations.
ApprovalMax offers two types of 2FA enforcement:
Soft enforcement: Every time users reload a webpage, they will be prompted to set up two-factor authentication (2FA). An email notification with a reminder will be sent additionally on a weekly basis.
Hard enforcement: Every user action will redirect the user to the 2FA enforcement webpage. An email notification with a reminder will be sent on a daily basis.
How to set up 2FA enforcement:
Administrators can choose between the two enforcement types on the Organisation settings and connection page:

