> For the complete documentation index, see [llms.txt](https://help.steeple.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.steeple.com/en/mises-a-jour-produit/semaine-2026-05-11.md).

# Week of 15/06/2026 — Access to the Steeple store / Two-factor authentication

**🛍️ Navigation – Direct access to the Steeple Store**

Until now, administrators had no direct access to the Steeple Store from the interface, which could slow down ordering equipment or managing licenses. This update aims to simplify access to the store by integrating it directly into the main navigation, to allow organization administrators to manage their equipment and subscriptions without leaving Steeple.

🆕 What has been updated:

* **New “Store” item in the navigation** : accessible from the main navigation bar, just after “Administration”.
* **Access to the Steeple store** : ordering touchscreens, boxes, and increasing the number of licenses directly from the interface.
* **Opening in a new tab** : the store opens without leaving the Steeple interface.
* **Targeted visibility** : access is reserved for organization administrators and is not visible to other users.

<figure><img src="https://608007981-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FByS0e17eM732OXdGGkme%2Fuploads%2FbOr0Ue57J9aFMVX71rt7%2Fimage.png?alt=media&amp;token=6613a95c-ce14-4a62-abc6-3f093803d277" alt=""><figcaption></figcaption></figure>

**🔐 Security – Two-factor authentication (2FA / TOTP)**

Until now, logging in to Steeple relied solely on a username and password, with no additional security layer in the event of credential compromise. This update aims to strengthen account protection by offering two-factor authentication via a one-time code (TOTP), for users who do not use SSO login.

🆕 What has been updated

* **Activation from account settings** : display of a QR code and a manual key to configure an authentication app (Google Authenticator, Authy, etc.).
* **Backup codes** : generation of downloadable or copyable codes to access the account in the event of loss of the authentication device.
* **OTP challenge at login** : accounts protected by 2FA are presented with a verification step using a temporary code at each login.
* **Administrator management** : administrators can disable a user's 2FA via a dedicated confirmation modal, to handle blocking situations.

ℹ️ Note: 2FA is available only for non-SSO logins.