Manage MFA Policies

Configure Multi-Factor Authentication requirements in IAM → Security → MFA Policies.

Enable MFA

1. Click the policy row in the MFA Policies list.
2. Toggle Enabled to ON.
3. Review OTP configuration options.
4. Click Save.

Disable MFA

Same path — toggle Enabled to OFF → click Save.

Extended Branding

Enable the Extended Branding option in the MFA settings to include your organization's name and logo on the OTP registration screen displayed to users.

User MFA Enrollment Process

When MFA policy is enabled, users follow these steps on their next login:

1. Install an OTP app (Google Authenticator, Microsoft Authenticator, etc.).
2. Scan the QR code displayed on screen with the OTP app.
3. Enter the verification code from the OTP app to complete enrollment.
4. Enter an OTP verification code on each subsequent login.

TIP

A manual entry secret key is provided for users who cannot scan the QR code.