By default, multi-factor authentication (MFA) is enabled. However, there are certain times when multi-factor authentication should be disabled temporarily, such as when a user is setting up a new multi-factor authentication device.

Only users with the Admin role can change a user’s multi-factor authentication requirement.

Temporarily disabling multi-factor authentication for a user 

You can disable multi-factor authentication to allow a user to temporarily log in without being prompted for a multi-factor authentication code.

To disable multi-factor authentication for a user:

1. Click Administration > Users & Roles in the site navigation.
2. Click the ... icon next to the desired user.
3. Click Disable MFA.

A warning message will appear that the user does not have multi-factor authentication enabled.