Google Apps Technical Transition Guide For Business, Education, and Government - Manual (Page 54)

54 Google Apps Technical Transition Guide
If you enable 2-step verification in your domain, you and your users benefit from extra
login security. Even if a user’s password is cracked, guessed, or otherwise stolen, an
attacker can't sign in without access to the user's verification codes, which only the
user can obtain via their own mobile phone.
Note: Even if you enable 2-step verification for your domain, it is opt-in per user.
It is recommended that you enable 2-step verification for your domain.
• Read Getting started with 2-step verification for more information.
Early Adopters
Test auth services (optional)
Level of Effort: Moderate to High
If you decided to implement one or more auth services during the Core IT phase, now
is the time to do so in a limited scope. Walk your early adopters through any new
processes and make sure they can access everything they should be able to (and
make sure they can’t access anything they shouldn’t be able to). Based on your
experience with your early adopters, draft documentation that will help the rest of your
users make the transition to your new auth processes.
Global Go Live
Launch auth services (optional)
Level of Effort: Moderate
Now that you’ve performed a dry run of any new auth services with your early
adopters, you’re ready to deploy them to your entire company. Do so alongside the
rest of your go-live initiatives, and make sure to provide users with the information
they need to access new services.