terraform/website/source/docs/enterprise/organizations/authentication-policy.html.md

---
layout: "organizations"
page_title: "Organization Authentication Policy"
sidebar_current: "docs-enterprise-organizations-policy"
description: |-
  Owners can set organization-wide authentication policy in Terraform Enterprise.
---


# Set an Organization Authentication Policy

Because organization membership affords members access to potentially sensitive resources, owners can set organization-wide authentication policy in Terraform Enterprise.

## Requiring Two-Factor Authentication

Organization owners can require that all organization team members use [two-factor authentication](/docs/enterprise/user-accounts/authentication.html). Those that lack two-factor authentication will be locked out of the web interface until they enable it or leave the organization.

Visit your organization's configuration page to enable this feature. All organization owners must have two-factor authentication enabled to require the practice organization-wide. Note: locked-out users are still be able to interact with Terraform Enterprise using their `ATLAS_TOKEN`.

## Disabling Two-Factor Authentication Requirement

Organization owners can disable the two-factor authentication requirement from their organization's configuration page. Locked-out team members (those who have not enabled two-factor authentication) will have their memberships reinstated.