Hello,
We want to use organization feature and don’t want to use signing in using individual ac option, how to do it. We need 2fa(MFA) feature and organization selection along with this. And if we can get 2fa feature without organization selection it will be helpful for us.
Hi there,
Thank you for reaching out to us!
We are trying to reply and provide some information to older posts, in case others encounter the same situation and it can help them as well.
Reading through the mentioned flow, this should be possible, as 2FA/MFA is not reliant on the Organization feature and can act on a tenant-level as well.
The general settings to have in mind:
- Setup the MFA policy and configure/enable the factors you need. On the Multi-factor Authentication page of your tenant, after configuring the factors, you can set the policy to Never require MFA and then enable Customize MFA factors using Actions in order to adjust the MFA behaviour as required.
- After setting up the Organizations in your tenant, you can navigate to the Application for which you want to setup the mentioned flow and click on the Organizations tab. Under Types of Users select Both and under Login Flow, select No Prompt.
This combination of settings, after configuring the MFA policy through Actions, should allow the flow to work as intended, since you will not be forced to use the Individuals type for users when it comes to the Organizations, receive the Organizations prompt and also control the MFA behaviour.
Hope this helped!
Gerald