How to disable Authenticator app and enable only email

[B Ashok]

Hello Team, 

I have enabled MFA in my PDI, I would like to make only email authenticator for MFA, No secondary option. 

How should I disable Authenticator app and keep enable only email ?

Thanks

Ashok

[Randheer Singh]

Hi @B Ashok ,

You can use MFA factor policy to enable Email OTP based MFA without requiring authenticator app setup.

Product doc: https://www.servicenow.com/docs/bundle/xanadu-platform-security/page/integrate/authentication/task/c...

You an also refer this article. In this article, I have covered SMS OTP factor policy, but similar steps can be used for email OTP based MFA.

Thanks,

Randheer

[Mark Manders]

Do know that ServiceNow has limited the use of email on PDIs in the past and they don't need your permission to do that again. Your instance would become inaccessible if that happens. The app will guarantee access but that's up to you of course.