---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configuring MFA with SSO

# Configuring MFA with SSO {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Enforce MFA with SSO for your users within or outside your organization.

## Vorbereitungen

The MFA with SSO feature is offered as a part of the Adaptive Authentication plugin (com.snc.adaptive_authentication). You must enable the Adaptive authentication property for using MFA with SSO feature. To know more on how to set up Adaptive authentication, see [Adaptive authentication](https://servicenow-prod.fluidtopics.net/XQ5OEG0LBshxmWwXEKVReg "Use the Adaptive authentication policy framework to enforce contextual authentication controls to the right users at the right time. Adaptive authentication uses authentication policies to evaluate authentication requests and then either deny or allow access to your instance based on the specified policy conditions.").  
Hinweis:  
MFA with SSO login is available if the glide.authenticate.mfa.with.multisso.enabled property is set to true.

Role required: adaptive_auth_admin, sso_config_admin

## Prozedur

1. Navigate to AllMulti-factor AuthenticationProperties.
2. Enable the Enable Multi-factor authentication and Enable Multi-factor Authentication with SSO check boxes.  

   <br />

3. Click Save.
4. Navigate to Multi-factor AuthenticationMFA Context.  
   The MFA Context form appears.  

   Hinweis:  
   By default, the policy is Step-Up MFA Policy. Users are shown with Multi-factor Authentication if a condition configured in Step-Up MFA Policy evaluates to true. Policy takes precedence over the user or role-based configuration.
5. **Wahlweise:** To edit a policy, go back to the Authentication Policy record, change the conditions, and come back.  
   When you navigate to the Authentication Policy record, you can add or edit the 'Policy Inputs' to the referenced Policy fields, Step-Up MFA Policy or Step-Down MFA Policy.
6. To set a new policy condition, click Policy Conditions.
7. Click New.
8. On the form, fill in the fields.  
   {#configure-mfa-with-sso__table_ihs_5ym_bmb__entry__2}

   | Fields | Description |
   |-|-|
   | Label | Unique name for the condition that you want to create for the label. |
   | Description | The policy condition description. |
   | Conditions | The type of condition that you want to apply for the policy. You can add filter conditions and 'OR' clauses. Hinweis: Adding various filter conditions and clauses enables you to challenge MFA for specific users. |
   [Tabelle : 1. Conditions form]

   {#configure-mfa-with-sso__table_ihs_5ym_bmb}   

   To set up your conditions, consider the following example. Assume that you want the authentication scheme with the identity provider as your condition for external users. You can set the conditions as follows:
   1. Select Authentication Scheme and set the criteria as Single Sign-On or Username and Password.

      Based on this selection, the user is
      provided with an SSO-based login or login form to specify the user
      name and password.
   2. Select Identity Provider and specify the provider as the IDP record for which you want to enable MFA. For example, Okta.

   {#configure-mfa-with-sso__ol_b1d_zz1_fsb}

   Based on this selection, if the user logs in with SSO, the user is not
   challenged with MFA. In contrast, if the user logs in using Okta, then the user is challenged with MFA.
9. Click Submit.
{#configure-mfa-with-sso__steps_u1z_dbr_1rb}
**Zugehörige Konzepte**   

* [Adaptive authentication](https://servicenow-prod.fluidtopics.net/XQ5OEG0LBshxmWwXEKVReg "Use the Adaptive authentication policy framework to enforce contextual authentication controls to the right users at the right time. Adaptive authentication uses authentication policies to evaluate authentication requests and then either deny or allow access to your instance based on the specified policy conditions.")
* [Multi-factor Authentication with Single Sign-On](https://servicenow-prod.fluidtopics.net/MEn_nrDHiYBJwrtnCmiJow "You can use MFA with an SSO provider for your ServiceNow instance.")