Skip to content
MFA criteria › Configuring MFA › Multi-factor authentication › Authentication › Access Management
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configure role-based multi-factor criteria

Use role based multi-factor criteria to enforce Multi-factor authentication for all users assigned to specific roles.

Before you begin

Role required: adaptive_auth_admin

Procedure

  1. Navigate to All > Multi-factor Authentication > Multi-factor Criteria.

  2. In the Multi-factor Criteria list, open the Role-based multi-factor authentication record.

  3. Use the Multi-factor Roles list to add or remove roles.

Add a roleDouble-click Insert a new row... and enter or select a role name. Click the Save Icon (
Image omitted: save-icon.png
Save icon) to save the entry.</td></tr><tr><td id="d33047e106"><strong>Remove a role</strong></td><td>
Click the delete icon \(
Image omitted: delete-icon.png
delete icon\) to remove a role from the list.
  1. Click Update.

Result

Your instance enforces multi-factor authentication for all users who are members of the roles listed in the Multi-factor Roles list.

Important: The record must be active to enforce role-based multi-factor authentication.