Configuring Multi-Factor Authentication

The Multi-Factor Authentication page allows you to configure multi-factor authentication for your Infoblox Portal users who have an email domain that matches the selected domain name. If 3rd party IdP authentication is already activated for the selected domain, you cannot activate multi-factor authentication until you have deactivated the 3rd party IdP for that respective domain.

By enabling multi-factor authentication for a domain, all users with an email address that matches the MFA active domain are required to set up multi-factor authentication the next time they log in. Infoblox SSO Portal currently supports Okta Verify and Google Authenticator for multi-factor authentication.

If you deactivate multi-factor authentication, any individual multi-factor authentication configuration for users with an email domain that matches the selected domain will be removed from the system. Deactivating multi-factor authentication for a domain will set the multi-factor authentication status of users with an email domain that matches the selected domain to "Disabled,” regardless of their previous individual configuration.

To activate multi-factor authentication settings, complete the following:

• Activate multi-factor authentication

To perform other multi-factor authentication, complete the following:

• Reset user enrollment