This article reviews managing Multi-Factor Authentication Method Enrollments for Users.
MFA Method Initial Configuration
When Multi-Factor Authentication is enabled, Users will be prompted to set up an MFA Method upon their first log in. The 'Set Up Authentication' process will walk the User through picking an Authentication Method and the configuration steps for it.
The available Authentication Methods are defined by the administrator for the User's organization and can include the following options:
Authenticator App
Email
Text/SMS
Phone
The first MFA Method configured will be set as the User's default method and will be automatically used when the User is prompted to authenticate their login. After an MFA Method has been configured, the User can view, update, add, or remove their MFA Method Enrollments on their User Record.
When more than one MFA Method is conjured, the User can manually select another option if they are unable to authenticate with the default option.
Enable or Disable MFA
To update MFA Method Enrollments, follow these steps:
Click steps to expand for additional information and images.
1) Click the profile button, then select User Info.
2) Switch to the Security tab.
3) Toggle Enable multi-factor authentication on or off.
Add MFA Methods
If more than one Authentication Method is configured, the User will be prompted to select a method each time they authenticate their login.
To add authentication methods, follow these steps:
Click steps to expand for additional information and images.
1) Click the profile button, then select User Info.
2) Switch to the Security tab.
3) Click add method,
4) Select the desired method.
5) Click add.
6) Enter the requested information.
7) Complete confirmation.
8) Click next.
9) Click done.
10) Click save then select the desired save option.
Set a Default Method
The MFA Method configured as the 'Default' will always be automatically used when the User is prompted to authenticate their login. All other methods will require that the User manually select them to send an authentication request.
To change the default method, follow these steps:
Click steps to expand for additional information and images.
1) Click the profile button, then select User Info.
2) Switch to the Security tab.
3) Click set default next to the desired method.
4) Click save then select the desired save option.
Remove a Method
If the 'Default' method is removed, the top method listed will be automatically set as the 'Default'. If all methods are removed, the User will be prompted to configure an MFA Method on their next login.
To remove an authentication method, follow these steps:
Click steps to expand for additional information and images.
1) Click the profile button, then select User Info.
2) Switch to the Security tab.
3) Click the trashcan button 
to remove the authentication method.
to remove the authentication method. 
4) Click save then select the desired save option.
