Migrate Away from MFA with Actions

Knowledge Articles
1

Overview

This article explains how to migrate the Multifactor Authentication (MFA) solution implemented with Actions to MFA without Actions by turning on the “Require Multi-factor Auth” setting to always and disabling the MFA-related Action. It also discusses whether the users already enrolled in MFA will be impacted by this change.

Applies To

  • Multifactor Authentication (MFA)
  • Actions

Solution

To ensure no downtime when migrating from MFA with Actions to MFA without Actions, set the MFA policy to Always and then unbound the MFA action.

  • Users who are already enrolled will not be affected and can continue logging in as usual.
  • When the MFA policy is set to Always, all users without an MFA factor enrolled will have to do so.