Multi-factor authentication (MFA) adds an extra layer of login security by requiring multiple forms of identity verification.
1. Multi-factor authentication (MFA) enhances account security by requiring multiple forms of identity verification to log on. These methods can include a username and password, a text message code, or an authenticator.
2. If both Secure Phone Text Message Authentication and Authenticator Authentication are selected, users only need to use one of these methods to log on.
Procedure
1. Turn on the Enable Two-factor Authentication switch.
2. In the Enablement Scope section, select the objects for which to enable MFA. To exclude specific accounts, open the selection box and add them as exceptions.
3. Select an authentication method. More methods are being added.
4. Click Save.
All accounts with MFA enabled must have a secure phone attached. If an account does not need a secure phone, add it to the exceptions.
For information about how employees use an authenticator, see How employees can use an authenticator.