diff --git a/manifests/multinode.pp b/manifests/multinode.pp
index 2cc335f..918729e 100644
--- a/manifests/multinode.pp
+++ b/manifests/multinode.pp
@@ -267,6 +267,12 @@ MACAddressPolicy=none'
     $smtpuser = hiera("smtp_user_${environment}")
     $trusted_domains = [$site_name, $facts['fqdn'], 'localhost']
     $tug_office = hiera_array('tug_office')
+    if $customer_config['twofactor_enforced_groups'] {
+    $twofactor_enforced_groups = $customer_config['twofactor_enforced_groups']
+    }
+    if $customer_config['twofactor_enforced_excluded_groups'] {
+    $twofactor_enforced_excluded_groups = $customer_config['twofactor_enforced_excluded_groups']
+    }
 
     # Secrets from local.eyaml
     $admin_password = safe_hiera("${customer}_admin_password")