This topic describes how to enable and disable multi-factor authentication (MFA) and how to unbind an MFA device. You must perform these operations as a CloudSSO administrator.

Enable or disable MFA

If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The CloudSSO administrator can also disable MFA based on business requirements.

  1. Log on to the CloudSSO console.
  2. In the left-side navigation pane, click Settings.
  3. In the Username-password Logon section, enable or disable MFA.
    • To enable MFA, click Enable MFA.
      Note After MFA is enabled, MFA devices must be bound to users for the users to log on to the CloudSSO user portal. For more information, see Bind or unbind MFA devices.
    • To disable MFA, click Disable MFA.

Unbind an MFA device

If a CloudSSO administrator binds MFA devices to users, the administrator can unbind the MFA devices based on business requirements.

  1. Log on to the CloudSSO console.
  2. In the left-side navigation pane, choose User Management > User.
  3. Click the name of the user from whom you want to unbind an MFA device.
  4. On the Details tab of the user details page that appears, find the MFA device that you want to unbind in the MFA Devices section and click Delete in the Actions column.
  5. In the Delete Virtual MFA Device message, click OK.