UPDATE FROM GOOGLE
Posted: 12 Jun 2014 01:00 PM PDT
An update on identity verification and login challenges
Back in May, we communicated the upcoming launch of login challenges--a new feature aimed at keeping domain accounts safe from hijackers, even if they have attained a user’s username and password. The login challenges feature was rolled out slowly over the past few weeks, and impacted a large number of domains this week. The initial intent was not to expose this feature to users with 2-Step Verification enabled and domains using SSO. While the challenge feature is not enabled for domains using SSO, many users in these domains did see a prompt to enter their phone number as a means of verifying their identity in the future. This understandably caused confusion and led to escalations to admins. Upon hearing of this confusion, the launch of the interstitial prompt was temporarily rolled back for all domains until SSO domains can be fully excluded, at which point it will be relaunched. We are passionate about keeping our users’ information safe and secure, so we do plan to enable login challenges for domains using SSO later this year. Furthermore, enabling 2-Step Verification provides the highest level of protection for users, so we encourage domains to take advantage of this offering to protect their data. For more information:
Google is enhancing security for the Google domain with improvements to the single-sign on process. This may mean that you will be asked to authenticate more often when logging in to certain areas. For example, users may be asked to re-authenticate when accessing areas like Dashboard Data or Apps Password.
You might also be asked if you want to verify your identity with a mobile phone number when logging in. You may choose to skip this verification option, but you could be prompted again in the future. If you chose to provide a phone number, Google will not use that number for anything other than verification. NOTE: You can add a mobile number immediately if you wish by going to the Account recovery options page. Alternatively, you can follow these steps:
1. Starting in Mail, click your Profile icon and choose Account from the menu.
Note that these steps may not work for all accounts, particularly shared accounts. If you have any issues adding a mobile number, please contact 4HELP.