#9561·logto

feature request: Add an option to skip 2FA for specific social connectors

Author: shing-yuCreated Sep 5, 2026Updated Sep 17, 2026

What problem did you meet?

Currently, when two-factor authentication (2FA) is globally enabled, users must complete it even when logging in via a trusted third-party social connector (e.g., Google, GitHub). Since many social identity providers already enforce their own robust authentication and 2FA processes, prompting the user again within Logto creates unnecessary friction and degrades the seamless single sign-on (SSO) experience.

Describe what you'd like Logto to have

Please add a "Skip Two-Factor Authentication" toggle switch to the configuration settings for each individual social connector within the admin console.

  • Disabled (Default): Logto's standard 2FA process is enforced after a successful social login.

  • Enabled: Users authenticating via this specific social connector completely bypass the Logto 2FA step and are logged in immediately.

This per-connector granularity would allow administrators to trust highly secure providers while maintaining strict 2FA rules for less secure or custom login methods.