This topic describes multi-factor authentication.
Multi-factor authentication (MFA) adds an extra layer of security to user accounts. To sign in, users must provide their password and then verify their identity using a second method: either SMS authentication or authenticator app authentication.
Procedure:
1. Turn on the multi-factor authentication switch.
2. Under Scope, select the objects to apply this feature to. To exclude accounts, add them under Exceptions.
3. Select the authentication methods available to users: SMS authentication and authenticator app authentication. If you enable both, users can choose which one to use when they sign in.
4. Click Save.
All accounts using multi-factor authentication must be linked to a security phone. If an account cannot be linked at this time, add it to Exceptions.
To learn how employees use an authenticator app, see How employees use an authenticator app.