Zurich Release – MFA Is Now Mandatory

[InsideDSpace]

The Zurich release of ServiceNow has introduced an important change that impacts every user: Multi-Factor Authentication (MFA) is now built-in and mandatory.

For a long time, MFA has been recommended as a best practice to secure accounts. But with Zurich, ServiceNow has taken a stronger stance — MFA is no longer optional.

-> What happens when you log in?

When users log into their Zurich instance, they’ll immediately see a new enrollment banner on the homepage.
• This banner starts a 30-day countdown for setting up MFA.
• During the countdown, you can continue working normally.
• Once the countdown ends, MFA setup is enforced at login — you won’t be able to access the instance until it’s completed.

This ensures that no user is left without an additional layer of protection.

🔑 How to Set Up MFA in Zurich?

I’ve created a short video walkthrough where I explain each method in detail and show the setup process step by step.

👉 Watch full video here- https://youtu.be/rltfOEWbccI?si=EHISEg40AeJsTVdj

Let me know your thoughts!

#ZurichRelease #ZurichFeatures

[Dr Atul G- LNG]

Hi @InsideDSpace 

Could you please add prefix: Article to avoid confusion for the readers.

[ldave]

will this impact also sso enabled instances? (because we use sso and mfa is managed by the sso provider, I don't want another layer from servicenow)

[Ambuj Tripathi]

No, the SSO Logins aren't impacted by the MFA enforced by the servicenow. This enforcement is only applicable for the users logging using username/pwd only.

For more details, please refer to this KB - 

Concise KB about MFA Enforcement - KB1700938 

Detailed FAQ KB About MFA Enforcement - KB1709783 

[Shueng]

Hi there,

So is MFA 100% enforced on Zurich? On the MFA properties there is still an option to toggle this on/off. Will this still work or will it get overridden? TIA