GenAuth DocsDocuments
Concepts
User Guide
Development Integration
AgentAuth
Metadata
Development Integration
Multi-tenant (beta)
Console Documentation
Multi-tenant Console
Tenant Console
Saas Application Demo
Concepts
User Guide
Development Integration
AgentAuth
Metadata
Development Integration
Multi-tenant (beta)
Console Documentation
Multi-tenant Console
Tenant Console
Saas Application Demo
Old version
User Guide
  • Quick Start

  • Authentication

  • Access Control

  • Authorization

  • Adaptive MFA

  • User Account Management

  • User Directory Management

  • Applications

  • Become a Federation Authentication Identity Provider

  • Connect External Identity Providers (IdP)

  • WeChat Ecosystem Full Scenario Capabilities

  • Migrate Users to GenAuth

  • Security Settings

    • General Security

    • Password Security

    • Multi-factor Authentication

      • SMS Code Based MFA
      • Email Code Based MFA
      • Time-based One-time Password MFA
      • Face Recognition Based MFA
      • Integrate MFA via SDK
      • MFA Policy Configuration
  • Branding

  • Automation

  • Audit Logs

  • Setting

  • FAQ

¶ MFA policy configuration

Update time: 2025-07-23 07:34:21
Edit

Path: Security Settings->Multi-factor Authentication->Policy Configuration

Role: Administrator

GenAuth supports configuring whether to enable MFA for different third-party identity sources at the user pool level.

  • The Policy Configuration module will display all identity sources configured under the Identity Source Management menu. Before configuring the MFA policy, make sure that the user pool has configured the target identity source.
  • This configuration is effective globally and is not affected by the custom security function configuration of self-built applications.
  • When no MFA authentication method is enabled globally, all third-party identity sources displayed in the policy configuration are disabled by default. ​
  • When one or more MFA authentication methods are enabled globally, the default state of each identity source is switched to enabled.
  • When the switch of a certain identity source connection is turned off globally, all MFA processes will be skipped when users log in to all applications of the user pool using the identity source connection method.
  • When a certain identity source connection switch is turned on globally, users will need to perform secondary identity authentication when logging into all applications of the user pool using this identity source connection method.
Previous article: Integrate MFA via SDK Next article: Global Login Box

User identity management

Integrated third-party login
Customized authentication process

Enterprise internal management

Single sign-on
Multi-factor authentication
Permission management

Developer

Development Documentation
GitHub (opens new window)

Company

official@genauth.ai
16th Floor, Building B, Beichen Century Center, Chaoyang District, Beijing (Total)
Room 406, 4th Floor, Block B, No. 200, Tianfu Fifth Street, High-tech Zone, Chengdu (Branch)

© Beijing Steamory Technology Co., Ltd.