We have our own mail server and would rather not have ERPNext having access to it and prefer that ERPNext makes few connections to and from the internet. Is it possible or are there any plans on enabling 2FA without having e-mail enabled?
You can setup 2FA with an Authenticator app - that wouldn’t require an email.
That’s actually my preferred method. I guess I shall try setting it up but was worried that without e-mail setup then I might get locked out. It seems that the setup qrcode is delivered by e-mail and not shown in the web browser where I would expect it to be shown. Perhaps it is potentially shown in both?
“Scanning the QR Code with an authentication app like Google Authenticator registers the access for the user and automatically starts to generate tokens that can be used to login”
I setup access to our mail servers submission port with a dedicated account as default e-mail account mitigating most risks and setup just outgoing e-mail on erpnext. Wasn’t hugely intuitive but atleast it didn’t insist I setup e.g. IMAP as well. Working now. Not sure why e-mail is required to communicate the link as the setup code is only shown after a valid password but outgoing e-mail will no doubt be useful anyway.