Demo companies that sign in without two-step verification

For operators: TRANXACT_MFA_EXEMPT_COMPANIES lets a deployment’s listed demonstration companies sign in with a password alone. Inert when unset; a company that requires two-step verification always still gets it.

A public demonstration company is shown by many presenters to many audiences, and asking each of them for a second factor gets in the way of the demonstration. The deployment’s operator can list such companies so that their users sign in with a password alone.

• Set TRANXACT_MFA_EXEMPT_COMPANIES in the service’s environment to the company codes, separated by commas, for example <DEMOCO>,<DEMOCO2>.
• It is an operator setting of the deployment, not a screen: no administrator can switch it on from the console.
• When it is unset, nothing changes.
• A company whose own policy is to always ask for two-step verification still asks.
• Every other company on the deployment keeps its two-step verification (see Two-step verification).