Making MFA (Multi-Factor Authentication) mandatory for all users on an account significantly strengthens overall security. It reduces the risk of unauthorised access, even if passwords are compromised, and helps protect sensitive data from phishing attacks and breaches. By enforcing MFA across all users on your account, organisations ensure consistent protection and reduce the chances of a single weak link putting the entire account at risk.
This is an Account Owner setting only, other user roles will not have access to enable and edit.
To make MFA mandatory for Team Members:
From the Dashboard, click on Account Settings on the left menu
Next to the heading Multi-factor Authentication login for team members, select form the following options:
MFA is non-mandatory
This is the default setting on all accounts. This will still allow for individual team member to enable MFA, regardless of their user roleMake MFA mandatory for Power users and Finance team member
All Power Users and Finance roles will be required to set up MFA. All other Team Members without those roles are not affected and may continue without MFA
Make MFA mandatory for ALL team members
All team members, regardless of their role, are required to set up MFA
Click Save
For existing Team Members, when enabled they will be promoted set up on their next successful log in. They will have a 20 day grace period to action the set up.
For new Team Members, they will be forced to set up at the time of activating their login.