Enabling Multi-Factor Authentication

Administrators and integrators with the correct permissions can enable MFA for all users on a site from the Global Settings page.
Before enabling MFA for your site, you
must
 set up MFA on your own account first. Complete your own MFA enrollment, then return to enable it site-wide.
Once MFA is enabled for a site, it cannot be turned off.
Enable MFA for a Site
  1. Navigate to
    Settings
     by clicking the gear icon in the lower left of the screen.
  2. Click the
    Global Settings
     tab.
  3. Scroll to the
    Account Security
     section.
  4. Toggle
    Require Multi-Factor Authorization
     to the on position.
  5. Enter your password when prompted.
  6. Click
    Save
    .
Once saved, all users will receive an email notification. On their next login, they will be required to complete MFA enrollment before accessing the site.
What Happens When MFA is Enabled
  • All users attempting to access the site will see only a single page prompting them to set up MFA. They cannot navigate anywhere else until enrollment is complete.
  • Any request made to the system on an MFA-required site without a valid MFA login will return an error and immediately log the user out.
  • Users with access to multiple sites will be prompted to complete MFA when selecting an MFA-required site from the site selection screen.
MFA and Wallet-Based Credentials
  • If wallet based credentials are configured for a site, MFA is enabled automatically — no manual step is required.
  • MFA can be enabled on a site without Wallet-Based Credentials, but Wallet-Based Credentials cannot be used without MFA.
  • MFA cannot be disabled if Wallet-Based Credentials credentials are in use on the site.
Notes for Administrators
  • MFA is set at the site level. A user with access to multiple sites may face MFA requirements on some sites but not others.
  • Individual users cannot enable or disable MFA — this is controlled by site administrators and integrators only.
  • You can view the MFA methods currently registered for a user by navigating to their profile page and scrolling to the bottom of the page.
  • If a user is locked out due to MFA issues, contact support to reset their MFA enrollment.