---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure Email as an MFA factor

# Configure Email as an MFA factor {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure policy input and condition to display Email OTP as an MFA factor policy for
authentication.

## Before you begin

Role required: adaptive_auth_admin

## Procedure

1. Navigate to AllMulti-factor AuthenticationMFA Context.
2. Click MFA Factor Policies tab.  
   Note:  
   The EMAIL as MFA Factor with a Policy is available by default. You can edit the policy and specify the policy inputs and conditions.
3. Select the Display Email OTP as an MFA Factor Policy.  
4. Click New to add Policy Inputs.
5. Select the filter criteria that you want to create.  
   Following are the types of filter criteria:
   * [IP Filter
     Criteria](https://www.servicenow.com/docs/g~lpMxbVH8eJ51GCmj6e9A "IP filter criteria allows you to filter users based on the user's IP addresses. You can configure an authentication policy to allow or deny access to a specific address or range of addresses.")
   * [Role Filter
     Criteria](https://www.servicenow.com/docs/HXDTiPNpknZC0Xbik_2MGA "Role filter criteria allows you to filter users based on the roles. You can configure an authentication policy to allow or deny access to a list of user roles.")
   * [Group Filter
     Criteria](https://www.servicenow.com/docs/MfIg8wupPXPb9s226MDDUw "Group filter criteria allows or denies user access based on the user group to which the user belongs.")

   {#configure-mfa-factor-policy-with-email__ul_xjk_24j_xvb}

   For example, Role Filter Criteria.
6. Click Role Filter Criteria, fill the fields for the role filter criteria and submit the record.  
   The new policy is created. For more information, see [Role Filter Criteria](https://www.servicenow.com/docs/HXDTiPNpknZC0Xbik_2MGA "Role filter criteria allows you to filter users based on the roles. You can configure an authentication policy to allow or deny access to a list of user roles.").
7. On the Policy - Display Email OTP as an MFA Factor Policy page, click Policy conditions.
8. Click New to add Policy Conditions.
9. On the form, fill in the fields:  
   {#configure-mfa-factor-policy-with-email__table_mxz_wyp_znb__entry__2}

   | Field | Description |
   |-|-|
   | Label | Name to identify the condition. |
   | Description | Description of the condition. |
   | Condition | Logical combination of multiple policy inputs (filter criteria) that is used to evaluate authentication requests. Select the role based filter criteria policy that was created for the condition. |
   [Table 1. Condition form]

   {#configure-mfa-factor-policy-with-email__table_mxz_wyp_znb}
10. Click Submit.
11. **Optional:** Repeat step 8 to create additional policy conditions.  
    Note:  
    If you create multiple policy conditions, the final output of the access policy depends on the logical OR output of the all policy conditions. This means the policy will evaluate to true if any one of your policy conditions is met.

    Based on the role filter (users) policy and the conditions specified for the
    role is matched, the Email MFA factor is shown as an options for
    authentication for the users.

*[\>]: and then