---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# MFA enforcement properties

# MFA enforcement properties {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure the properties for MFA enforcement from Yokohama and upgrade to Yokohama.

To set the MFA enforcement properties, navigate to sys_properties.list to validate or change the MFA enforcement properties.
{#mfa-enforcement-properties__table_lcc_wdq_vcc__entry__2}

| Field | Description |
|-|-|
| glide.authenticate.multifactor.setup.bypass.count | Number of times a user can bypass setting up multi-factor authentication (Max possible bypass count is 3, beyond that it is treated as 3). |
| glide.authenticate.multifactor.self_enrolment_period | Indicates number of days a user is given an option to self-enroll for MFA, after which the user is automatically challenged with MFA. Any value exceeding 90 is treated as 90 days only. |
| glide.authenticate.multifactor.enforcement.max_relaxation_period | Indicates the maximum number of days a new user is given an option to self-enroll for MFA, after which all new users performing non-SSO logins are automatically challenged with MFA. Any value exceeding 270 is treated as 270 days only. |
| glide.authenticate.multifactor.enforcement.debug | MFA Enforcement debug logger. Helps in debugging the flows for MFA logins. Note: This property doesn't exist on the instance, you have to create and enable the property, if needed. |
| glide.authenticate.hybrid_user_tracking.enabled | Property for the tracking of hybrid users. The user accounts which are not marked as 'Web service access only' in corresponding sys_user record, but still performs integrations (For example, API logins) using the username and password, is tracked in the 'User Login Info' table when this property is enabled. Note: This property doesn't exist on the instance, you have to create and enable the property, if needed. |
| glide.authenticate.hybrid_user_tracking.debug | A debug logger for the tracking of hybrid user API logins. Note: This property doesn't exist on the instance, you have to create and enable the property, if needed. |
[Table 1. MFA enforcement properties]

{#mfa-enforcement-properties__table_lcc_wdq_vcc}