Multi-factor authentication( MFA) enabled based on groups?

[ShavageS]

Hi All, 

Good Day!

Can some one suggest how we can Enable multi-factor (MFA) authentication based on groups?

[Randheer Singh]

Hi @ShavageS ,

You can use the MFA context Policy to enforce MFA based on groups.

Steps :

1. Create Group Filter Criteria

2. Create a new Adaptive Authentication Policy

3. Associate group filter criteria with the new Adaptive Authentication Policy. You can also add additional filters, such as authentication schemes and IP filter criteria.

4. Add Policy conditions

5. Associate policy with MFA context policy. and choose the default policy (for example: step-up)

This community article can be consulted for reference. The steps would be similar. Instead of IP criteria, you can use group filter criteria.

https://www.servicenow.com/docs/bundle/xanadu-platform-security/page/integrate/authentication/task/c...
https://www.servicenow.com/docs/bundle/xanadu-platform-security/page/integrate/authentication/concep...

Thanks,

Randheer

[Siddharam]

Thank you for your input

[ShavageS]

Hi @Randheer Singh ,

Thanks for your input. We tried for Domain separated Environment but its not working. Do we need to do any extra configuration setting to achieve this for domain Separation environment. 

[PrernaSingh]

Hi,

I want to enable multi-factor authentication for all admin users except two of them. Please let me know if it is possible or not.