How to reset MFA

makesh
Tera Contributor

 We have encountered a specific scenarios, where user have already enabled MFA and configured the authenticator apps in their smartphones, but due to some reasons, the app has been deleted in their smartphone or they don't have access to the app.

how to reset the MFA for the user again as an administrator so that they can reconfigure the MFA with new phone/app.

Note:- We have enabled MFA based on roles, so enabling/disabling individual users is not possible, how to overcome this limitation ?

1 ACCEPTED SOLUTION

Tony DiRienzo
Giga Guru

The user's MFA token is stored in the User Multifactor Authentication (user_multifactor_auth) table.  You can access it using the "User Multi-factor Setup" module in the application navigator, or directly:

https://[your-instance].service-now.com/nav_to.do?uri=user_multifactor_auth_list.do

Find the user's MFA record here.  If you just want them to be able to register the existing token to a new app, set "Validated" to false, and they will be presented with the QR code screen at their next login attempt.  If you want to revoke the old token and give them a completely new token to register with their app, then delete the MFA record for that user and the system will create a new one and present the QR code at their next login attempt.

View solution in original post

6 REPLIES 6

George23
ServiceNow Employee
ServiceNow Employee

This video shows you how to reset MFA. 

 

Petter-B
Tera Contributor

How can this be executed on my own pdi? I've replaced my phone and are no longer able to login to my pdi.

Seems to be a deadlock?