When a G Suite user attempts to sign in to a new device, they may be greeted with:
Verify it's you
This device isn't recognized. For your security, Google wants to make sure it's really you.
Enter a phone number to get a text message with a verification code.
This seems less like additional security and more like phone number harvesting, especially since the user has no preregistered number.
Clicking "Try another way" leads to:
Get a verification code sent to your phone.
Clicking "Get help" results in:
Enter the last password you remember using with this Google Account
which isn't very helpful, as this user has had the same password since creation.
Entering the password dumps to a dead end:
Couldn't sign you in
Contact your domain admin for help. Learn more
Clicking "Learn more" brings us to a singularly unhelpful page:
Signing in to your work, school, or other group account
Happily, Mario R. linked to the actually relevant G Suite documentation.
In a nutshell, domain admins can disable the phone number requirement, but only for 10 minutes:
Google Admin Console > Users > click username > Security > Login challenge ("Turn off identity questions for 10 minutes after a suspicious attempt to sign in.") > TURN OFF FOR 10 MINS ("Turn off identity questions for 10 minutes after a suspicious attempt to sign in.")
/misc | Sep 26, 2019
Subscribe or visit the archives.