Open Security Configuration
From the left navigation menu, click Admin.
At the top of the Admin page, click Configuration.
In the left-side configuration menu, click Security.
This opens the Security configuration page.
Review Multi-factor Authentication
The Multi-factor authentication section controls whether all users in your organisation must set up MFA before they can use the app.
MFA adds an extra layer of security by requiring users to verify their identity using an additional authentication factor.
This helps protect accounts from unauthorised access.
Enable Enforce MFA
Turn on the Enforce MFA toggle if all users should be required to set up MFA.
When enabled, users who have not enrolled an MFA factor will be redirected to an enrolment screen during their next session.
They will not be able to access the app until they finish setting up MFA.
Click Save after changing the setting.
Disable Enforce MFA
Turn off the Enforce MFA toggle if your organisation does not want to require MFA for all users.
Click Save after changing the setting.
Users may still be able to use MFA individually depending on their account settings, but organisation-wide enforcement will not be required.
Important Notes
Enforce MFA applies to all users in the organisation.
When enabled, users without MFA will be redirected to set it up on their next session.
Users cannot access the app until MFA setup is completed.
Enforcing MFA may affect all staff, so communicate the change before enabling it.
Click Save after changing the toggle.
MFA helps improve account security and reduce the risk of unauthorised access.
Troubleshooting
If users cannot access the app after MFA is enforced:
Ask them to complete the MFA enrolment screen.
Confirm they have access to their authentication method.
Ask an administrator to check their user account if they are stuck.
If the Save button is disabled:
Confirm that the toggle has been changed.
Refresh the page and try again.
Check that you have permission to update security settings.
If you cannot see the Security page:
Confirm you are in Admin > Configuration.
Check your role permissions.
Ask an administrator to review your access.
If a user cannot complete MFA setup:
Ask them to try again in a new browser session.
Confirm their device time is correct if using an authenticator app.
Ask an administrator to review their MFA status from the user management area.