idea Multi-Factor Authentication (MFA) Force for all users in ArcGIS Enterprise Ideas

Multi-Factor Authentication (MFA) Force for all users

ahmed2badr — Thu, 09 Feb 2023 07:22:52 GMT

It will be great if there is capability to the admins forcing all users to use MFA only in login. admin should be able to force and prevent users from disabling MFA

Re: Multi-Factor Authentication (MFA) Force for all users

John_Spence — Thu, 09 Feb 2023 14:40:35 GMT

Tie them to your identity management solution for your network. You can use that to enforce MFA.

Re: Multi-Factor Authentication (MFA) Force for all users

versta — Thu, 16 Feb 2023 02:51:03 GMT

Built in users such as the portal admin and other users NOT members in a IdP can opt out of MFA. This goes against many large companies' security policies. It would be great if we can force ALL Portal built in user to use MFA.

Re: Multi-Factor Authentication (MFA) Force for all users

JeroenBaltussen1 — Thu, 07 Sep 2023 11:09:24 GMT

Can ESRI reply to this question.

Without enforce the policy for the use of multifactor authentication it is not an useful option.

It seem also not possible even to check (with an api call) if this user option is enabled.

So:

- make an option to enforce the policy

- extend the api to check if the user has enabled this policy

(https://developers.arcgis.com/python/api-reference/arcgis.gis.toc.html#user )

the call here show only if the adminstrator turn on the possibility (or am I wrong?)

mfaEnabled

Indicates if the user’s account has multifactor authentication set up.