Enforce multifactor authentication for ArcGIS logins

[BernSzukalski]

By configuring multifactor authentication, you can significantly enhance your organization’s security by preventing unauthorized access even if someone manages to obtain login credentials. Multifactor authentication is an essential, often mandatory, part of your organization’s security needs. With the October 2023 update, the ability to enforce multifactor authentication was introduced.

Learn more about how to configure and enforce multifactor authentication for ArcGIS logins by reading Configure multifactor authentication for ArcGIS logins. The blog article includes tips and suggestions for using MFA with minimal disruptions.

[Daniel_Perkins]

Hi @BernSzukalski ,

One bit of feedback. Maybe there is a good reason this can't be implemented.

For users who loose or damage their phone and can't get to authenticator - if they were not savvy enough to save the QR code when they first set up their MFA, there should be a way in Settings->Security to generate the QR code again to set up a new device with MFA. Otherwise they are stuck creating recovery keys for ever or have to involve an admin to disable and then re-enable their MFA. Would be nice if there were a self-serve option. I can put this in ArcGIS Ideas if you think it's appropriate.

Thanks!

[BernSzukalski]

@Daniel_Perkins Thanks for the feedback. Apologies, I lost track of this thread so am a little late in responding. I've sent your comments along to the dev team and will respond here with any additional information. But putting this into Ideas is a good idea (pun intended).

[AndreaB_]

Hi @BernSzukalski ,

I realize you're probably on the AGOL side, but do you know if/when this will be available for ArcGIS Enterprise Portal?

Thanks!

[RiccardoKlinger]

I strongly encourage Esri to offer this feature for ArcGIS Enterprise as well!