The CreatorCon Call for Content is officially open! Get started here.

Zurich Release – MFA Is Now Mandatory

InsideDSpace
Giga Contributor

The Zurich release of ServiceNow has introduced an important change that impacts every user: Multi-Factor Authentication (MFA) is now built-in and mandatory.

For a long time, MFA has been recommended as a best practice to secure accounts. But with Zurich, ServiceNow has taken a stronger stance — MFA is no longer optional.

-> What happens when you log in?

When users log into their Zurich instance, they’ll immediately see a new enrollment banner on the homepage.
• This banner starts a 30-day countdown for setting up MFA.
• During the countdown, you can continue working normally.
• Once the countdown ends, MFA setup is enforced at login — you won’t be able to access the instance until it’s completed.

This ensures that no user is left without an additional layer of protection.

🔑 How to Set Up MFA in Zurich?

I’ve created a short video walkthrough where I explain each method in detail and show the setup process step by step.

👉 Watch full video here- https://youtu.be/rltfOEWbccI?si=EHISEg40AeJsTVdj

Let me know your thoughts!


#ZurichRelease #ZurichFeatures

🔵 Welcome to my first video on the ServiceNow Zurich Release! In this video, I'll show you how to request your own Zurich Personal Developer Instance from the ServiceNow Developer Portal, and walk you through the initial landing experience. You'll learn: ✅ How to sign in and request an instance ✅
5 REPLIES 5

Shueng
Tera Contributor

I've since had a play with this and found the system does allow you to disable in the MFA properties.

 

First go to the MFA property and try to toggle 'Enable Multi-factor authentication' to off. This would bring up a message highlighting the importance of MFA but to click 'here' to provide a reason. I chose temporarily switching off.

 

Then you'll need to go to the MFA Context and under the related links there's 'Deactivate Policy'. Once deactivated you should now be able to untick 'Enable Multi-factor authentication'.

 

We're only deactivating for a very short period of time and my post is in no way discouraging the use of MFA.