Review MFA enrolment options

Dinesh90
Tera Contributor

Hi @Ambuj Tripathi :

can we remove the below option from the MFA enrolment options at the time of MFA setup ? If yes please let me know how to do this ?
- Setup Biometric authentication, Passkey or Hardware Security Key

Dinesh90_0-1755506946126.png

 

3 REPLIES 3

Rafael Batistot
Tera Sage

Hi @Dinesh90 

 

In Multi-Factor> properties looking for “Enable web authentication (FIDO2) based MFA.
(glide.webauthn.enabled)”

 

if is true, desable

Thanks for the detailed description and example! 

Ambuj Tripathi
ServiceNow Employee
ServiceNow Employee

Hi @Dinesh90 

 

The property mentioned by @Rafael Batistot can be set to false to disable the biometric or passkey option.

 

Moreover, if in your instance any user has already enrolled with this factor, you may want them to inform before disabling this that they can't use this factor anymore to avoid these users getting blocked during MFA validation.

 

You can check this by visiting to sys_user_public_credential table and check which users have been enrolled into MFA by using this Hardware security key or passkey factors.

 

Cheers!