NethCTI: Force 2FA activation prompt on first user login

[viktec]

Description:

Currently, users can manually enable Two-Factor Authentication (2FA) from Settings → Two-Factor Authentication in NethVoice CTI.
However, administrators have no way to enforce or prompt users to enable 2FA at their first login.

This feature is being requested to improve security and align with modern practices where users are guided or required to enable 2FA when they first access the system.

Purpose:

Increase overall security posture by ensuring users adopt 2FA early.

Provide administrators with control over mandatory 2FA policies.

Improve user awareness by showing a notification or setup wizard for 2FA at the first login.

Proposed solution

Add an administrative option to force or suggest 2FA activation on the first user login in NethVoice CTI.
Possible approaches:

• When the user logs in for the first time and 2FA is not configured, display a setup prompt before granting access.

• Allow admins to enable a “Require 2FA setup at first login” policy from the system configuration or cluster UI.

• Optionally, include a gentle reminder mechanism if the user skips activation.

Alternative solutions

• Keep 2FA activation as a user-driven action but display a recurring notification banner until configured.

es.