August 2025

3454748

Multifactor authentication (MFA) enforcement for your CONNECT account

CONNECT Account Administrators can now enforce multifactor authentication (MFA) for all non-federated users accessing a CONNECT account. MFA enforcement is optional, but it will greatly increase the security of an account.

We recommend this is enabled and you should plan a suitable date to enable this for your CONNECT account.

When MFA is enforced on an account, all users receive an email to inform them of the enforcement. All non-federated users must register a multifactor authentication device before they can access the account

Many of the users in your account may have enabled MFA on their CONNECT user profiles already, however we recommend you communicate this change ahead of time to notify non-federated users in your account that multifactor authentication (MFA) will be required.

For more information on MFA enforcement, see Enforce multifactor authentication.

For more information on how to register an MFA device for your profile, see Enable multifactor authentication.

Note: As an Account Administrator you must register an MFA device for your user profile before you can enforce MFA at the account level. This ensures you are not locked out of the account when the enforcement begins.