MFA enrollment

Enrollment is the process through which users register their email address or set up the authenticator apps on their mobile devices for MFA. Use the Enrollment Settings tab to configure the authenticators; your users should enroll and make certain authenticators mandatory. You can also enable backup verification codes and configure the settings related to email verification enrollment.

Enrollment settings

• Enable these authenticators for user enrollment: Use this setting to choose the authenticators you'd like your users to enroll in. Click the icon next to the authenticators to make the specific authenticator mandatory, so the user will be forced to enroll for it during MFA registration after successfully logging in.

Note: Identity360 uses email verification as the default MFA authenticator to verify users' identities, so it cannot be disabled until after initial setup. Users will be automatically enrolled in Email Authenticator using their primary email address or User Principal Name from the directory they are a part of.

• Enable backup verification codes for MFA recovery: Use this option to enable the creation of backup verification codes by users to get access to the Identity360 portal and applications when they encounter difficulties during the MFA verification process.

Note: This option only allows users to use backup codes for recovery during MFA verification. Refer to the Advanced Settings to enable the creation of backup codes for the users.

These one-time-use backup codes allow users to prove their identities in case their MFA device is not reachable or they are unable to use their enrolled MFA methods of authentication. Once this setting is enabled, the backup codes can be generated, and end users can enter them to authenticate themselves during MFA authentication.

Previous Topic Next Topic