GUACAMOLE-1219: Document ability to disable TOTP per-user/group.
diff --git a/src/images/totp-group-config.png b/src/images/totp-group-config.png
new file mode 100644
index 0000000..0c5bf39
--- /dev/null
+++ b/src/images/totp-group-config.png
Binary files differ
diff --git a/src/images/totp-user-config.png b/src/images/totp-user-config.png
index 8b27154..f4d8ec5 100644
--- a/src/images/totp-user-config.png
+++ b/src/images/totp-user-config.png
Binary files differ
diff --git a/src/totp-auth.md b/src/totp-auth.md
index 188201d..c83aaea 100644
--- a/src/totp-auth.md
+++ b/src/totp-auth.md
@@ -90,8 +90,26 @@
save the user configuration, and the user will be presented with the QR code
at next login and asked to confirm it.
+(totp-disable-user-group)=
+
+### Disabling TOTP for users or groups
+
+In versions of Guacamole prior to 1.6.0, installing and configuring the TOTP
+module meant that all Guacamole users would be required to enroll in and
+successfully authenticate via the TOTP factor. Starting with 1.6.0 the TOTP
+requirement can be disabled on a per-user or per-group basis, allowing
+administrators more flexibility in configuring the TOTP requirement.
+
+By default all users will still be required to authenticate with TOTP,
+however the requirement can be disabled by checking the "Disable TOTP"
+checkbox. This can be done for an individual user account, but it can
+also be disabled for a group resulting the TOTP requirement being
+disabled for any members of the group.
+
+
+
(totp-downloading)=
Downloading the TOTP extension
