Configuration Fields

This reference lists the settings exposed by mageb2b/customer-tfa in Magento Admin.

Configuration paths are included for controlled deployments and config:set. Use Magento Admin for normal changes so field validation and scope inheritance still apply. The extension status display is not listed because it reports installation state rather than a configurable value.

Two-Factor Authentication

Field	Configuration path	Input	Scope
Enable TFA for Customers	`customertfa/general/enabled`	Select	Default, Website, Store view
Mandatory TFA for Customers	`customertfa/general/mandatory`	Select	Default, Website, Store view
Disable TFA During Admin Login as Customer	`customertfa/general/disable_for_login_as_customer`	Select	Default, Website, Store view
Issuer Name	`customertfa/general/issuer_name`	Text	Default, Website, Store view
Recovery Codes Count	`customertfa/general/recovery_codes_count`	Text	Default, Website, Store view
Setup Secret Lifetime	`customertfa/general/setup_secret_lifetime`	Text	Default, Website, Store view
Maximum Verification Attempts	`customertfa/general/max_verification_attempts`	Text	Default, Website, Store view
Allow Customers to Regenerate Recovery Codes	`customertfa/general/allow_recovery_code_regeneration`	Select	Default, Website, Store view
Recovery Code Regeneration Authentication	`customertfa/general/recovery_code_regeneration_auth`	Select	Default, Website, Store view
Allow Customers to Disable TFA	`customertfa/general/allow_customer_disable`	Select	Default, Website, Store view

Visibility dependencies:

customertfa/general/mandatory is available when customertfa/general/enabled is 1.
customertfa/general/disable_for_login_as_customer is available when customertfa/general/enabled is 1.
customertfa/general/disable_for_login_as_customer is available when customertfa/general/mandatory is 1.
customertfa/general/issuer_name is available when customertfa/general/enabled is 1.
customertfa/general/recovery_codes_count is available when customertfa/general/enabled is 1.
customertfa/general/setup_secret_lifetime is available when customertfa/general/enabled is 1.
customertfa/general/max_verification_attempts is available when customertfa/general/enabled is 1.
customertfa/general/allow_recovery_code_regeneration is available when customertfa/general/enabled is 1.
customertfa/general/recovery_code_regeneration_auth is available when customertfa/general/enabled is 1.
customertfa/general/recovery_code_regeneration_auth is available when customertfa/general/allow_recovery_code_regeneration is 1.
customertfa/general/allow_customer_disable is available when customertfa/general/enabled is 1 and customertfa/general/mandatory is 0.