---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# MFA factor policies

# Multi-factor Authentication factor policies {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the MFA factor policies to specify the types of authentication factors that you would like to permit for your instance.

MFA factor policies are a critical component of an organization's security posture, enabling you to enforce additional verification steps beyond passwords. These policies define the authentication methods that users must employ to
access your organization's resources, providing a configurable approach to authentication.

Implementing MFA factor policies helps improve the security of your organization's systems and data. These policies provide an additional layer of protection against cyberthreats, making it more difficult for attackers to
gain unauthorized access.

To use the MFA factor policies you have to configure the policy inputs and policy conditions along with an MFA Context. To learn more, see [Multi-factor Authentication context](https://www.servicenow.com/docs/vYirFCwtH5voBqWWW2e4Gg "The Multi-factor Authentication (MFA) policy context uses a policy to define how and when MFA is enforced during the login process.").

Following are the MFA factor policies available in ServiceNow that enables you to specify the types of authentication factors that are permitted or required:

* FIDO2
* SMS
* Email

{#mfa-factor-policies__ul_jzh_53x_bgc}

To get the most out of MFA factor policies, you need to understand how to configure and manage them effectively. This includes defining the authentication methods, specifying policy inputs and conditions, and configuring policy
enforcement (MFA Context). By understanding and implementing MFA factor policies, you can improve the security and integrity of your organization's systems and data.
**Related concepts**   

* [Multi-factor Authentication context](https://www.servicenow.com/docs/vYirFCwtH5voBqWWW2e4Gg "The Multi-factor Authentication (MFA) policy context uses a policy to define how and when MFA is enforced during the login process.")
* [FIDO2 as an MFA factor](https://www.servicenow.com/docs/Dj95kzqumpZ3kn9b1xPqvQ "You can configure FIDO2 as an MFA factor policy to enforce MFA for your users.")
* [SMS as an MFA factor](https://www.servicenow.com/docs/BvqIrlwGQ4roLhOmAEyWqw "Multi-factor authentication (MFA) with SMS as a factor for your authentication.")
* [Email as an MFA factor](https://www.servicenow.com/docs/hAS_Tsa3xdKwyVtcGszS1A "Multi-factor authentication (MFA) with email as a factor for your authentication.")