Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

Home / Identity Administration / People / Current: Setting Multi-Factor Authentication on People

When your policy requires users have a more secure login experience, EmpowerID's multi-factor authentication (MFA) model gives you multiple options for applying MFA to people. Depending on your policy, you can require users to perform MFA against a wide variety of MFA Types or simply allow users to decide for themselves whether they want to protect their accounts with MFA.

Info

If the Password Manager Policy assigned to users has one or more required MFA Types assigned to it, users must use those types in addition to their regular logon methods. Setting an MFA Type directly on a person only has effect when that MFA Type is not required on their Password Manager Policy.

...

Set multi-factor authentication on

...

a person

  1. From the navigation sidebar, type the name of the person for whom you want to set MFA in the Person search field and then click the tile for that person.
    Image Removed
    This directs you to the View page for that person. View pages allow you to view information about a selected resource and manage that resource as is appropriate.
    From the View page, click the Multifactor Authentication accordion to expand it

    Navigate to the View or View One page for the person to whom you want to require multi-factor authentication. EmpowerID provides two main ways to do this. You can navigate to the page by searching for the person using the Global search bar at the top of the page (quickest), or you can navigate to the page by searching for the person using the Find Person page.

    Insert excerpt
    IL:Bootstrap Accordion
    IL:Bootstrap Accordion
    namepersonsearchoptions
    nopaneltrue

  2. On the View or View One page, expand the Multifactor Authentication accordion and then click the Add (+) button in the grid.

    Image RemovedImage Added

  3. In the dialog that appears, select the desired MFA Type from the Type drop-down, specify the Priority and then click Save.

    Image Removed
    TipMFA Types only appear in the drop-down if they are added to the person's Password Manager Policy. For more information, see Assigning MFA Types to Password Manager Policies.Image Added


    Once EmpowerID processes the request, you should see a record for the MFA Type in the grid. As indicated by the record, the selected MFA Type is now required for the person. The additional factor must be completed by the user before access is granted.

    Image RemovedImage Added

...

  1. Insert excerpt
    IL:External Stylesheet
    IL:External Stylesheet
    nopaneltrue