> For the complete documentation index, see [llms.txt](https://enterprise.hideez.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://enterprise.hideez.com/hideez-enterprise-server/single-sign-on-settings/user-settings.md).
# User settings
When administator [added your account](/hideez-enterprise-server/employees/how-to-add-an-employee.md) and [enabled SSO option](/hideez-enterprise-server/single-sign-on-settings/nastroika-polzovatelei.md), you have to open the link in the email from the server (delivered after user SSO enabling, described in previous section) and register your user.
## Two-factor authentication required
You will see the next screen. Click the "**Next**" button. Also here you can change the display language.
If your administrator [enabled second-factor authentication](/hideez-enterprise-server/single-sign-on-settings/nastroika-polzovatelei.md) you have to set and confirm password.
Then you have to set up the second factor:
### 1. Passkey
* If you have a hardware security key (for example, **Hideez Key**) or your smartphone as a Passkey, choose the "Cross-Platform" option.
* If you want to use a platform key (such as a biometric sensor or PIN code from your computer/smartphone), choose the "Platform" option. Then follow the instructions on the screen.
### 2. Hideez Authenticator
### 3. OTP Authenticator App
After successfully enabling two-factor authentication, you will be prompted to save your recovery codes. 10 codes, each of which consists of 8 characters. You can log in with their help if for some reason you cannot enter the OTP code.
[Log in with the recovery code.](/hideez-enterprise-server/administration/how-to-enable-two-factor-authentication-at-hideez-enterprise-server.md#log-in-with-recovery-code)
After successful sign in you can configure all these login options, change password, see the list of registered security keys in the "**FIDO2 Authenticators"** section (cross-platform and platform separately) and enroll new device (for example, smartphone) for single sign on, change page language, etc. Just choose desired setting and follow the instructions on the screen.
### Second factor is not required
If two-factor authentication is not required you have to set up sign in option. Also here you can change the display language.
1. Use FIDO2 Authenticator
\- If you have a hardware security key (for example, Hideez Key), choose the "Cross-Platform" option.\
\- If you want to use a platform key (such as a biometric sensor or pin code from your computer/smartphone), choose the "Platform" option.\
\
In this case you can choose "use usernameless" option that allows you to login without username.\
\
Then follow instructions on the screen.
2. Use Hideez Authenticator\
\
Follow instructions on the screen.\
\
After successful sign in you can configure all these login options, see the list of registered security keys in the "**FIDO2 Authenticators"** section (cross-platform and platform separately) and enroll new device (for example, smartphone) for single sign on, change page language, etc. Just choose desired setting and follow the instructions on the screen.
### Disabling 2FA at HES
To disable two-factor authentication on the HES server, go to the **One-Time Password** section and click **Disable 2FA**.
Confirm the action.
Two-factor authentication is disabled. But you can always resume it.
### How to enable 2FA again
Go to the **One-Time Password** and click on the **Add OTP app** button. Then follow the instructions on screen.
### Resetting recovery codes at HES
After you [disable 2FA](#disabling-2fa-at-hes) on HES and [enable it](#undefined) again, your recovery codes will be reset.
Please, note, if you just reset the OTP application, recovery codes will be not reset.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://enterprise.hideez.com/hideez-enterprise-server/single-sign-on-settings/user-settings.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.