How to enforce MFA to the users who does not have any roles - Yokohama version.

[hmala]

Do we have any direct approach by ServiceNow? to enforce MFA to the users who does not have any roles - Yokohama version.

I have used a dummy role to achieve this as workaround.

However, I am curious to know if there is a certain process by ServiceNow.

Thanks,

Hari

[Ankur Bawiskar]

@hmala 

I don't think it's available for users without role.

any user in instance will have either snc_internal or snc_external role and MFA

MFA is enforced for snc_internal users and not on snc_external user although it can be enabled for them

Multi-Factor Authentication (MFA) Enforcement FAQ 

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Randheer Singh]

Hi @hmala,

If you want to enforce MFA for all users irrespective of their role, you can just use the authentication scheme filter criteria. In the policy condition, you can use an authentication scheme is "username and password".

Thanks,

Randheer

[Ambuj Tripathi]

Hi  @hmala 

Yes, this is possible via the group filters. What additional step you need to do is to add the users (or automate it?) to a group and always enforce MFA for the logging in users if they belong to this group.

Also, along with this, you can club other filter conditions, like logging mechanism, roles, IPs etc.

But yeah..this is one possible way hack way.

Thanks!

-Ambuj