Enforcing multifactor authentication for all users
Only the Access Appliance administrator can enforce multifactor authentication for all Access Appliance users.
Before you enforce multifactor authentication:
Multifactor authentication can be enforced only if at least two local Appliance administrator users have configured it.
You can set a future start date for enforcement so that the users get sufficient time to configure their multifactor authentication.
If multifactor authentication is not configured by the start date, the user will not have access to the appliance. If the user's automation workflow uses login API, then that will also be impacted.
Once multifactor authentication is enforced, it cannot be reversed.
It is not possible to postpone the start date of enforcement after it is set.
You can prepone the start date for enforcement using the button on the page.
The start date for enforcement cannot be more than 90 days from the current date.
To enforce multifactor authentication for all users
- Sign in to the Access Appliance UI.
- Go to Settings > Security management > Multifactor authentication.
- Click Enforce to enforce multifactor authentication for all Access Appliance users.
Notify all users that they must configure multifactor authentication for their user accounts to be able to successfully sign in.
See Configuring multifactor authentication for your user account.