Known issue: WP VIP currently requires secondary 2FA to be configured for all admin roles on a hosted application, even if our SSO already has 2FA. This applies to both the network Super Admin role, as well as sub-site Administrator roles.

You will need to register to the WP network application and configure a secondary 2FA before you can be given an administrator role on either the network or a network sub-site. 

If you are given an administrator role and try to sign in without the secondary 2FA configured, your role will be automatically demoted back to "subscriber" (read only).

1. Go to to the SSO login endpoint:
    https://wpvip.hosting.gatech.edu/?option=saml_user_login
2. Authenticate to GT SSO with your PSA
3. After redirecting back to the landing page: you will now be registered to the network and logged in, with a "Reader" role only
4. Go to your user profile for to configure 2FA:  
   https://wpvip.hosting.gatech.edu/wp-admin/profile.php#two-factor-options
5. You can choose to enable Authenticator App, Email, and/or SMS-based 2FA. We recommend choosing Authenticator App to avoid common delivery issues.

To enable the Authenticator App for 2FA:

1. Choose "Enable Authenticator App" to see the configuration QR code and a validation code prompt
2. Open 1Password on your mobile device
3. Create a new login item for the network:
4. Fill initial fields:
   • Title: wpvip.hosting.gatech.edu
   • Username: your PSA username
   • Password: leave empty/do not fill
5. Add a one-time password field to the 1Password entry:
   • In the Edit view, choose "add more" and select "One-Time Password"
   • Tap the QR code icon next to the One-Time Password field to open the camera
   • Scan the 2FA configuration QR code on the WP dashboard 
   • Save to confirm
6. Enter in the 6-digit One-Time Password code on the WP VIP validation prompt to confirm the Authenticator App has been configured
7. Choose "Enable Recovery Codes"
8. Click the button to generate new recovery codes
9. Edit your 1Password entry to access the Notes
10. Copy-paste the codes into your 1Password entry Notes to save them
11. Save the entry again

After 2FA has been set-up, let Heidi know and she will assign you the administrator role.