MFA Policy

An MFA policy in an application refers to the set of rules and guidelines that dictate how Multi-Factor Authentication (MFA) is implemented within that specific application.This policy determines when and how users are required to provide additional verification, beyond just a password, to authenticate their identity.

---

You can go to the application drop down –> setting –> MFA Policy and setup up your rules.

A – MFA Policy (App name): Enabling this icon will activate the MFA policy for the application

B – Select the type of method you are opting for the security under preferences information

• OTP via email or phone
• Secure link via email or phone

C – The number of Grace logins (allows users a limited number of logins, or a period of time, to access a system without completing the usual authentication requirements) you would like to provide.

D – Provide the setting required under Session scope information

• Scope: choose where you want the setting to reflect either under the whole Repository or specific Application
• Duration: You can mention the time till when you want this feature to be active till

E- Incase you want to allow a user to use the application even if MFA is not enabled click Allow on the other information section

Click on Update after setting up the policy.

Note: If the Override checkbox is selected in any of the sections, the application will follow the global policy settings. If it is not selected, you can define and apply specific actions for the application.

---

---