Multi-factor authentication
Set your organisation's MFA policy, see who has enrolled, and reset a user's MFA.
Written By Karl
Last updated About 9 hours ago
Multi-factor authentication (MFA) adds a second step to signing in, such as a code from an authenticator app. Because Evenpay holds pay data, we recommend it for everyone.
Who can do this: Administrators.
Where: Settings β Organization β Security β MFA Policy
Require MFA
Turn on Require MFA for all users.
Under Allowed MFA Methods, choose Authenticator App, SMS Verification or both.
Save.
When Require MFA for all users is on, members who haven't set up MFA must do so the next time they sign in.
Check who has enrolled
The Enrollment Status table shows each user as Enrolled or Not Enrolled.
Reset a user's MFA
If someone loses their phone, select Reset next to their name. They set up MFA again the next time they sign in.
Good to know
Each user can also set up MFA themselves. See Signing in, passwords and two-factor authentication.
Authenticator apps are more secure than SMS. Allow SMS only if your team needs it.
If your team signs in with SSO, MFA is usually handled by your identity provider.
For our AI and security commitments, see the Evenpay Trust Center.
Related articles
Was this helpful?
More in Admin & security
Inviting, changing and removing usersThe primary ownerChecking a user's access (View Access)Running an access reviewStill need help? Share an idea