Enforce MFA for Organization Members

Enforce MFA for Organization Members

Enforce MFA for Organization Members

The Enforce MFA for Organization Members setting allows organization owners to enforce all members of an organization to enable multi-factor authentication (MFA) on their accounts before accessing the organization and its resources.

MFA enforcement is configured separately for each organization, while MFA itself is configured at the account level. Each account has a single MFA configuration that can be used across all organizations associated with that account.

Enable MFA Enforcement

Organization owners can enable MFA enforcement from the organization's Settings or Members section.

To enable the requirement:

  1. Open the Home page.
  2. Go to the Settings or Members section.
  3. Enable the Require MFA for Organization Members toggle.

When enabled, all members of the selected organization must have MFA enabled on their account to access the organization and its resources.



MFA Setup on First Login

Enabling MFA enforcement at the organization level does not automatically configure an authenticator for individual members.

If a member has not previously enabled MFA on their account, they are required to complete MFA setup when they first log in to an organization that enforces MFA.

Members who have already enabled MFA can use their existing MFA configuration to access the organization.

Account-Level MFA and Multiple Organizations

MFA is configured at the account level, so each account has a single MFA configuration that it can use across all organizations associated with that account when logging in.

Each organization has its own MFA enforcement setting. Therefore, enabling MFA enforcement for one organization does not automatically enable enforcement for other organizations.

For example, if an account belongs to multiple organizations:

  • If Organization A enforces MFA, the member must have MFA enabled on their account, and switching to Organization A requires an MFA code.
  • If Organization B does not enforce MFA, switching to Organization B does not require an MFA code.
  • If the member has already configured MFA for their account, the same MFA configuration can be used when accessing any organization associated with that account.

Invited Members

If an invited member does not have MFA enabled and MFA enforcement is enabled for the organization, the member must complete MFA setup on their first login to that organization.

Disable MFA Enforcement

To stop requiring MFA for an organization, disable the Require MFA for Organization Members toggle.

Disabling the organization-level requirement removes the MFA requirement for that organization. It does not disable or remove MFA that members have already configured on their accounts.

Lost Authenticator

If a member loses access to their configured authenticator, they should contact the Support Team to reset their MFA configuration.

After the Support Team resets the MFA configuration, the member can configure MFA again on their account.

Important Considerations

  • MFA enforcement is configured separately for each organization.
  • MFA itself is configured at the account level, with one MFA configuration per account.
  • Enabling organization-level MFA requires members to configure MFA.
  • Members who already have MFA enabled can use their existing account-level MFA configuration.
  • Disabling MFA enforcement for an organization does not disable MFA that members have already configured on their accounts.