I'm facing a challenge with our parent company, which is now requiring unique phone numbers for each new employee account being created. Previously, we had been using our company number for all accounts, but they seem to want to move towards using SMS for two-factor authentication in the future, even though it doesn't serve any immediate purpose now. Our company policy does not expect employees to use their personal phones for work, meaning we would need to either buy around 30 new phones with SIM cards and plans or find an easier solution. Does anyone have suggestions for a more affordable way to handle this situation, such as services that allow for phone number forwarding or similar alternatives?
5 Answers
Rather than investing in new phones, if you don't require SMS for every function, ask the parent company if using Wi-Fi connected devices with existing apps for 2FA would be acceptable. Sometimes, they just need a unique number without the need for physical SIMs.
Before diving into buying new phones, why not reach out to the parent company for clarification? They might have an existing policy that allows for a workaround or they could provide a budget for this. It's not really your job to solve this issue alone, so getting their input would be a smart move.
I wish they were more helpful! I've tried that, but they seem pretty set on this requirement.
You might want to rethink using SMS for two-factor authentication. It's considered insecure by many standards due to potential number porting attacks. It's better to suggest using an authenticator app instead, like Google Authenticator or Okta. This would not only be more secure but likely cheaper too. It could be worth discussing this with your administrators instead of enforcing insecure methods.
Thanks for the tip! I’ve definitely heard concerns about SMS security, but it seems to be enforced from the top. I'll push for a discussion about using authenticator apps.
Honestly, if they want it, they should be willing to fund it. You shouldn’t have to shoulder this cost on top of your usual responsibilities. If they can’t provide a solution, they need to rethink their policy!
If unique phone numbers are non-negotiable for 2FA, consider using a service like Google Voice for cheaper and temporary phone numbers. It could streamline the process instead of buying new devices altogether. Just ensure it aligns with company policies to avoid surprises later!
Good point! You might need to clarify what the actual requirement is with them. It could save you a lot of trouble.