MFA Policies let you define where MFA is required:
- Cold Boot Login
- Elevated Access (Run as Admin)
- Screen Unlock
and when MFA is required.
You can define MFA Policies on 3 levels:
- System
- Domain
- User
The system policy applies to the entire system, the domain policy applies to the users in the specified domain, and the user policy applies to the specific users only.
You can also define separate MFA policies for online login, offline login, and local login
System MFA Policy
To access the system MFA policy, click the Edit icon on the System MFA Policy tile.
Domain & User MFA Policy
In the Management Portal, domain and user policies are listed in the Custom Policies section
To create a domain or user MFA policy, click the "Add Policy" button
Enter the name of the policy to be created, e.g. "Domain MFA Policy"
Select the type of the policy, e.g. MFA Policy
Select the policy scope, e.g. Domain based access
Add domains to be included and/or excluded
Click the "Create Policy" button
Define the policy options, then click the "Save" button
