MFA reset
FAQ related to MFA reset and why it’s important.
- Lost the authenticator app setup. How can I reset?
It’s better if the users enroll in multiple factors so that they aren’t locked out due to MFA. For example, you can have the TOTP authenticator app, passkey, and email OTP-based MFA.
In case users are unable to use any of the enrolled MFA factors the administrator can reset the MFA by following these steps.
- Clearing the Authenticator app setup:
- Navigate to .
- Search for the user in the table.
- Delete the record associated with the user
- Clearing the FIDO2 authenticators and passkeys:
- Navigate to .
- Search for the user in the table
- Delete the records associated with the user
- Clearing other multi-factor setups associated with the user
- Navigate to .
- Search for the user in the table
- Delete the records associated with the user
In case no one including the admin can access the instance. The admin can perform a self-service MFA reset using a catalog item available at Now support.
- Clearing the Authenticator app setup:
- How to avoid administrators from lockout due to MFA?
The administrators enroll for multiple MFA factors so that they aren’t blocked from accessing the instance.
In case no one including the admin can access the instance. The admin can perform a self-service MFA reset using a catalog item available at Now support.