Configure SMS as an MFA factor

Configure policy input and condition to display SMS OTP as an MFA factor policy for authentication.

Before you begin

Plugin required: Multi-factor authentication with SMS (com.snc.authentication.sms_mfa).

Role required: adaptive_auth_admin

Note:

The MFA context policy must be evaluated as true to apply the SMS factor policy.

Procedure

1. Navigate to All > Multi-factor Authentication > MFA Context.
2. Click the MFA Factor Policies tab.
3. Select the Display SMS OTP as an MFA Factor Policy.
   
4. Click New to add Policy Inputs.
   
5. Select the filter criteria that you want to create.

   Following are the types of filter criteria:

   • IP Filter Criteria
   • Role Filter Criteria
   • Group Filter Criteria

   For example, Role Filter Criteria.

   
6. Click Role Filter Criteria, fill the fields for the role filter criteria and submit the record.
   The new policy is created. For more information, see Role Filter Criteria.
7. On the Policy - Display SMS OTP as an MFA Factor Policy page, click Policy conditions.
   
8. Click New to add Policy Conditions.
9. On the form, fill in the fields.

   Table 1. Condition form

   Field	Description
   Label	Name to identify the condition.
   Description	Description of the condition.
   Condition	Logical combination of multiple policy inputs (filter criteria) that is used to evaluate authentication requests. Select the role-based filter criteria policy that was created for the condition.

10. Click Submit.
11. Optional: Repeat step 8 to create additional policy conditions.
    Note:

    If you create multiple policy conditions, the final output of the access policy depends on the logical OR output of the all policy conditions. This means that the policy evaluates to true if any one of your policy conditions is met.

    Based on the role filter (users) policy and the conditions specified for the role is matched, the SMS as MFA factor is shown as an option for authentication for the users.