Activate role based multi-factor authentication
Use the glide.authenticate.multifactor property to enforce role-based multi-factor authentication (MFA) for all users assigned to specific roles.
The glide.authenticate.multifactor system property enforces multi-factor authentication based on the roles assigned to the user. If this property is set to true, then it enforces role-based multi-factor authentication for all users described in the Multi-factor Criteria [multi_factor_criteria] table. This table enforces multi-factor authentication based on the roles assigned to the user. If a user has been assigned admin, security_admin or user_admin roles in the multi-factor roles list, MFA is enforced.
Ensure that the property glide.authenticate.multifactor is set to true and that the Multi-factor Criteria [multi_factor_criteria] table has a Role base multi-factor authentication record with the Active field set to true.
More information
| Attribute | Description |
|---|---|
| Configuration name |
|
| Configuration type | - System Properties \(/sys\_properties\_list.do\) - Multi-factor Criteria \(/multi\_factor\_criteria\_list.do\) |
| Data type | - Boolean - Record configuration |
| Recommended value |
|
| Default value | <none> |
| Fallback value |
|
| Category | Authentication |
| Security risk | - Severity score: 5.7 - CVSS rating: Medium - Security risk details: Enforcing MFA based on roles strengthens authentication security and aligns with best practices for protecting privileged accounts. |
| Functional impact | Enabling this property improves the experience of the user. It acts as an extra layer of protection and security against compromised credentials. |
| Dependencies and prerequisites | None |
Parent Topic:Authentication