MFA Policies let you define where MFA is required:

• Cold Boot Login
• Elevated Access (Run as Admin)
• Screen Unlock

and when MFA is required.

You can define MFA Policies on 3 levels:

• System
• Domain
• User

The system policy applies to the entire system, the domain policy applies to the users in the specified domain, and the user policy applies to the specific users only.

You can also define separate MFA policies for online login, offline login, and local login

System MFA Policy

To access the system MFA policy, click the Edit icon on the System MFA Policy tile.