How to set MFA remember browser use email verification?

lipan
Tera Contributor

Hello everyone, I want to use"Do not challenge for MFA on this browser for the next 24 hours"when login with email verification, I enabled Remember browser in MFA properties, it only appears when using the authenticator, how to set it to appear and be available when receiving verification codes by email?


mfa propertie.PNGuse auth app.PNGuse mail auth.PNG

1 ACCEPTED SOLUTION

Randheer Singh
ServiceNow Employee
ServiceNow Employee

From a Security best practice perspective, we have disabled the remember browser option for email OTP-based MFA.

For the best user experience, I recommend you enable FIDO2-based MFA. With FIDO2, You can enroll your device's biometric authenticator and use it for MFA. 

 

FIDO2 provides best-in-class security (phishing resistant) with optimal user experience.

RandheerSingh_0-1690994604884.pngRandheerSingh_1-1690994644720.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 


https://docs.servicenow.com/en-US/bundle/utah-platform-security/page/integrate/authentication/concep...

View solution in original post

6 REPLIES 6

Managing MFA settings can get tricky. For the ""Do not challenge for MFA on this browser"" option, it's typically linked to the authenticator setup. To enable it for email verification codes, check if your MFA properties support this feature for email-based codes specifically.Also, ensuring your email is functioning correctly is vital. Tools like mailtester.ninja can be handy; they verify email deliverability and help troubleshoot any issues, ensuring you receive those verification codes hassle-free.

ShayleeKennedy
Kilo Contributor

Managing MFA settings can get tricky. For the "Do not challenge for MFA on this browser" option, it's typically linked to the authenticator setup. To enable it for email verification codes, check if your MFA properties support this feature for email-based codes specifically.