Disable Google Two-Factor Authenticator (2FA) for Access Server User or Group

Description:
How to disable Google two-factor authentication (2FA) or multi-factor authentication (MFA) for a particular User or Group.

Cause:
Unattended devices requiring 2FA/MFA blocks connections from reestablishing automatically. Other reasons also exist for needing to disable the extra authentication step for a VPN client.

Resolution:

To disable 2FA/MFA for a particular User or Group, you can use our CLI guide here.
Specifically, you can use the following command:

./sacli --user <USER_OR_GROUP> --key "prop_google_auth" --value "false" UserPropPut

For more details, refer to Google Authenticator multi-factor authentication.

If you have additional questions please submit a ticket.

Access Server Resources:
OpenVPN Access Server Documentation
OpenVPN Access Server Resource Center
OpenVPN Access Server Admin Manual