---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# SMS as an MFA factor

# SMS as an MFA factor {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Multi-factor authentication (MFA) with SMS as a factor for your
authentication.

Admin can configure ServiceNow instance to require users who attempt to
log in to the instance using SMS-based OTP.

When users attempt to log in to ServiceNow, SMS OTP is sent to the mobile
number associated with the sys_user record. Users can enter the six-digit verification code that
it sent to the mobile device and verify their identity.

You can configure MFA with SMS using the default Twilio as well. For more
information, see [Multi-factor authentication providers](https://www.servicenow.com/docs/mXlvzje3RGgcMl8newEwCQ "Use multi-factor authentication (MFA) providers to configure SMS and Email based authentication so that every user can log in securely.").

<br />

Further the MFA with SMS can be controlled based on the policy input and conditions using
filter criteria. Following are the types of filter criteria:

* [IP Filter Criteria](https://www.servicenow.com/docs/LnqmosZAmqs1aTZ6d6OGRg "IP filter criteria enables you to filter users based on the user's IP addresses. You can configure an authentication policy to allow or deny access to a specific address or range of addresses.")
* [Role Filter Criteria](https://www.servicenow.com/docs/ES4sgDCjU4aUCUoGHDXSOw "Role filter criteria enables you to filter users based on the roles. You can configure an authentication policy to allow or deny access to a list of user roles.")
* [Group Filter Criteria](https://www.servicenow.com/docs/39CDZ43MJSpt9wwY9sQ~aA "Group filter criteria allows or denies user access based on the user group to which the user belongs.")
{#mfa-with-sms__ul_xjk_24j_xvb}