---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Authenticator configuration options

# Authenticator configuration options {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the Authenticator Configuration page to manage authenticator options on your
instance.
Navigate to Multi-factor AuthenticationWeb AuthenticationAuthenticator Configuration to view and edit the default configuration options.
{#mfa-auth-config__table_uds_zcj_zpb__entry__2}

| Field | Description |
|-|-|
| Allowed authenticator type | Type of authenticators allowed to be registered. Options are: * Platform authenticators are attached or integrated into a device. Fingerprint readers or facial recognition available on mobile devices (such as Apple FaceID or TouchID) fall under this category. * Roaming authenticators can be removed from a computer or other client device and used elsewhere. Hardware keys fall under this category. {#mfa-auth-config__ul_dfr_t2j_zpb} |
| Attestation Type | Setting the value to direct or indirect will require importing authenticator metadata to attest to the provenance of an authenticator during registration. * None * Direct * Indirect {#mfa-auth-config__ul_tq2_dfj_zpb} |
| Platform self-attestation | Whether self-attestation is enabled for platform authenticators. |
| Cross platform self-attestation | Whether self-attestation is enabled for roaming authenticators. |
| User verification | Options are Preferred or Required. If required, web authentication flow prompts users for verification using PIN or Biometrics. |
| Verify user presence | Whether web authentication flow requires the user presence verification. |
| Resident key | Options are Preferred or Required. If required, the authenticator persists the public key credentials within the authenticator storage. |
| Timeout (In ms) | Maximum time limit for completing web authentication registration and authentication. Time is in milliseconds. |
[Table 1. Authenticator Configuration form]

{#mfa-auth-config__table_uds_zcj_zpb}

*[\>]: and then