---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# MFA types

# MFA types {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
FAQ related to MFA types and why it's important.

1. What are the types of verification methods that are available for MFA with ServiceNow?

   ServiceNow base system supports these verification methods.
   1. Passkey
   2. TOTP Authenticator apps such as Google Authenticator, Okta Verify, Microsoft Authenticator, Authy, DUO
   3. Biometric Authenticator (FIDO2) such as Windows Hello, Apple Touch ID, Face ID, Android fingerprint sensor.
   4. Hardware Security Keys (FIDO2) such as YubiKey, Thetis
   5. Email one-time password (OTP)
   6. SMS OTP - Multi-factor authentication with SMS plugin (com.snc.authentication.sms_mfaplugin) installation and factor configuration are required to enable SMS OTP-based MFA.
   {#faq-mfa-types__ol_zzv_yz3_jdc}
2. Can a user configure multiple MFA factors or verification methods?Yes, you can enroll for multiple MFA factors by visiting their user profile. For example, you can enroll a laptop with biometric authenticator, use the mobile phone
   with a passkey, and have an authenticator app set up.

3. What steps must users perform to complete the MFA setup?User can perform either of the following MFA options.

   <br />

   <br />

   Refer to the [Multi-factor authentication](https://www.servicenow.com/docs/36sMN6MuT_3BQlV~5S8RBw "Learn how to activate, use, and configure Multi-factor authentication (MFA).") documentation for more information about MFA setup.
4. Can the SMS and Email OTP-based MFA be limited to certain users?Admin can set up MFA factor policies for email and SMS OTP-based MFA factors to limit these factors to certain user groups or roles.

5. The users don't have a mobile phone where they can set up an authenticator app. How can these users enable MFA?From the Xanadu release onwards, you can use a biometric authenticator, passkeys, FIDO2 hardware security keys, and
   email OTP-based MFA without requiring an authenticator app setup on the mobile phone.

6. How do end users set up MFA?Refer to the [Using Multi-factor authentication](https://www.servicenow.com/docs/baWEu_jKjUAMe5dISKKOkA "Learn how to use multi-factor authentication tools to securely access your instance.") documentation for more information about MFA setup.

{#faq-mfa-types__ol_vfr_zfz_3dc}