Workspace Enabled Multifactor Authentication

There are times when Workspace Administrators may want to require Multifactor Authentication (MFA) for all workspace members. Only Workspace Administrators have the rights and permissions for establishing these workspace settings.

As a Workspace Administrator, to access the settings which enforce MFA across all workspace members, follow these steps:

Go to Workspace Settings.
Select Preferences from the top headings bar.

Choose how you want invited members to access the workspace:
- If you choose "Allow All" any user with a Microsoft account can access this Workspace if invited.
- Selecting "Not Allowed" turns off the ability for users to access this Workspace after signing in with Microsoft, restricting access to invited members with IDP accounts only.
- The "Allowed Domains" option offers a balanced access by permitting only invited users with Microsoft accounts from certain specified domains to access this Workspace. When opting for "Allowed Domains" it is crucial to list those approved domains to ensure that access is granted only to invited users from your trusted domains.
Select the checkbox to enforce MFA for all invited members:
- Enforcing MFA adds an extra layer of security to your workspace. When selected, all members will need to confirm their identity using two different methods (such as a password and a confirmation code sent to their phone) before they can access the workspace.
- Please note: this setting can only be enabled if "Sign in with Microsoft" is set to "Not Allowed" or "Allowed Domains". If you choose "Allowed Domains", you will need to manage the security of the Microsoft accounts from those domains as this extra security step can only be enforced for members who sign in with the IDP system.