Help Center/ IAM Identity Center/ User Guide/ MFA Management/ MFA Authentication/ Configuring MFA Device Enforcement
Updated on 2024-02-21 GMT+08:00
View PDF
Share

Configuring MFA Device Enforcement

You can determine whether IAM Identity Center users must have a registered MFA device when they log in to the user portal.

Procedure

  1. Log in to the Huawei Cloud console.
  2. Click in the upper left corner of the page and choose Management & Governance > IAM Identity Center.
  3. Choose Settings in the left navigation pane.
  4. Click the Authentication tab.
  5. In MFA Device Enforcement, select one of the following options based on service requirements:

    • Require them to bind an MFA device during login

      Use this option when you want to require users who do not yet have a bound MFA device, to bind a device by themselves during login following a successful password authentication. For details, see Binding an MFA Device.

    • Block their login

      Use this option when you want to enforce MFA authentication for every login.

    • Allow them to log in

      Use this option when you do not require MFA authentication for user logins.

  6. Click Save.
Parent topic: MFA Authentication