Role Based Multi Factor authentication exclusion

[sergiuhica]

We want to enable the role based auth for all users with roles in our instance but also want to exclude some service accounts with roles from this feature. Any suggestions?

[Vasantharajan N]

Please refer to the docs

https://docs.servicenow.com/bundle/sandiego-platform-security/page/integrate/authentication/concept/mfa-config-landing.html

[Randheer Singh]

You can leverage the Adaptive Authentication Step Down MFA policy to achieve the desired behavior.

in the policy conditions, you can add the role/group filter criteria to exclude a specific set of users. All other users will see MFA.

FYI, you can also enforce MFA for SSO logins in case your Identity provider does not have MFA support.

[Ujjwal019]

@sergiuhica , Can you help me with the same requirement, how did you achieve this?