Requiring Multi-Factor Authentication

Tip: Require multi-factor authentication according to the level of access for a specific user class. For example, information system best practices and regulatory compliance typically require the use of these controls for administrator accounts --based on the business value and range of resources they manage.

You can require multi-factor authentication by registered user class. You can also exempt users individually.

• Require multi-factor authentication controls. SETTINGS > Security Policies > User Auth > Multi-Factor Authentication
• Exempt individual users from policy. USERS > username > User Profile - User Settings - User Authentication - Multi-Factor Authentication

Note: It is best practice to notify users of any security policies that alter the sequence of steps or information needed at sign on before you apply these controls.