Multi-Factor Authentication (MFA) for Admins

Multi-Factor Authentication (MFA) adds an extra layer of security, requiring a code from an authenticator app. By default, all users can enable MFA for their own accounts. As a Super Admin, you can enforce MFA to make it mandatory for your entire admin team.

How MFA Works

• MFA is available to all users (optional by default).
• Super Admins can enforce MFA for all admins.
• When MFA is enforced, the Super Admin must first complete MFA setup on their own account
• Once enforced, all admins will be required to set up MFA on their next login
• Super Admins can see which admins have enabled MFA.

How to Enforce MFA for Your Admin Team

1. Go to Settings → User Management.
2. In the Multi-Factor Authentication section, check Enforce for administrators.
3. Once enforced, all team admins - including you, will be prompted to set up MFA.

Viewing MFA Status

• In the User Management list, you can see which admins have set up MFA.
• The “Remove MFA” option is available per user if needed.
• Even if you don’t enforce it, you’ll still have visibility of who has MFA enabled on their account.

What Admins Experience

When enforced:

• Admins will be prompted to set up MFA at login.
• They’ll scan a QR code with an authenticator app and enter the verification code.
• MFA will be required on every login afterward.

FAQs

Q: Can admins enable MFA without enforcement?

Yes, admins can enable MFA individually at any time from their account settings.

Q: What happens if I enforce it later?

Admins who haven’t set it up will be required to do so upon next login.