Login verification for Yandex 360 services

This feature comes with the Optimal plan. In other plans, login verification can be enabled via the API, but there's no option for custom settings for specific employees. How to do this

You can set up additional login verification for users in Yandex 360 for Business services. For authentication, users will need to enter both a regular password and a one‑time code — either the final digits of the number calling the phone registered in the system, or a numeric code received via SMS. This method is known as two-factor authentication (2FA), and it's more secure than just a password.

Login verification in Yandex‍ ‍360 is available to users whose accounts were created on the organization's domain. You can enable login verification for all such employees or only for specific ones.

Enable

  1. Open the organization's account.

  2. In the menu, select Security → Login verification.

  3. Configure the following:

    • Enable for: Specify All employees if you're enabling verification for the entire organization, or choose Selected employees if you want to set it up for specific employees.
    • Warning period: Time allocated to users for configuring login verification. When this period expires, employees will no longer be able to postpone the configuration.

    The verification method can't be changed. The default method of code delivery is a phone call. The system sends SMS only when a call can't be made.

  4. Click Enable.

  5. If you enable login verification for specific users, select the employees who must verify their login. What employees may require login verification

  6. If you enable login verification for all organization employees, you can force all users to log out of their accounts.


Log out of all accounts

You can terminate all user sessions if login verification applies to all employees of the organization. To do this, in the Login verification section, click Log all employees out and confirm the action. Typically, this is done right after you enable verification. This ensures that employees will need to log in to Yandex 360 again and go through the login verification settings window to continue using the services.

Logging out of services applies to anyone with accounts on the organization's domain.

If your administrator account is created on the organization's domain, then after logging out of all accounts, you'll also need to log back in to the organization's account.

When login verification is enabled only for some employees, the button Log all employees out is unavailable.

Select employees

When you enable login verification with the setting Selected employees, a verification code will only be requested from users in the Employees section at the bottom of the page. You just need to select the required employees in this list. You can search by first name, last name, username, or use these filters:

  • Administrators only, to see only the organization's administrators and employees with manager roles in the list.
  • Login verification enabled, to see only those for whom verification is already enabled.

When enabling personal login verification for the administrator, the "helping hand" rule applies

Administrators can't include themselves in the list of employees or exclude themselves from it. If necessary, ask another administrator in your organization to do this.

If login verification is enabled for All employees, the Employees section is ignored — the code will be requested from everyone.

Change

  1. Open the organization's account.

  2. In the menu, select Security → Login verification.

  3. Click Edit.

  4. Change the necessary settings:

    • Enable for. If you change the setting from All employees to Selected employees, you'll be able to select employees after saving changes. What employees may require login verification
    • Warning period. When this period expires, employees will no longer be able to postpone configuring the login verification.

  5. Click Save.

Disable

After disabling login verification, employees will be able to access their accounts using only their passwords.

  1. Open the organization's account.

  2. In the menu, select Security → Login verification.

  3. If login verification is enabled only for selected employees:

    1. Disable login verification for each employee it was specifically enabled for.
    2. Set Enable for to All employees.

  4. Tap Disable and confirm the action.

API is a special mechanism for managing Yandex 360 services, designed primarily for process automation. There are two ways to work with the API: create a special application (which can be done by a developer) or use the computer's command line. Complete documentation for developers.

An employee with the rights to manage a specific group of settings in Yandex 360 for Business. For example, payment and service plan managers have access to the "Payment and service plan" section, and message filters managers have access to the "Message filtering" section. Managerial roles and how to assign them

Company name on the internet. For example, for Yandex it's yandex.com. You can create mailboxes for employees with addresses like login@example.com on the domain. How to set up domains

Previous
Security recommendations
Next
Managing authorization on employee devices