---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# MFA criteria

# Multi-factor Authentication criteria {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use MFA criteria to determine which users and roles must use two-step verification.

## Multi-factor criteria {#multi-factor-authentication-criteria__section_yc2_dzv_ypb}

Use MFA criteria to determine which users and roles must use two-step verification. You can use one of these criteria or a combination of them to suit your business needs. You can use one of these criteria or a combination of them to
suit your business needs.  
Hinweis:  
It is recommended to use Adaptive Authentication policy based MFA.

User-based multi-factor criteria
:   Use user-based multi-factor criteria to select individual users who are required to log in using MFA. Administrators update the Enable Multifactor Authentication field on a user record to enable or disable
    MFA requirements for a user. For details on this process, see [Configure user-based multi-factor criteria](https://servicenow-prod.fluidtopics.net/RbyJnLKgn8dNpNTTr4SG0w "Use user based multi-factor criteria to enable MFA for a user.").

Role-based multi-factor criteria
:   Use role-based multi-factor criteria to require MFA login for all users assigned to a specific role. The Role-based multi-factor authentication record on the Multi-factor Criteria
    \[multi_factor_criteria\] table contains the list of roles that require an MFA login. For details on maintaining this list, see [Configure role-based multi-factor criteria](https://servicenow-prod.fluidtopics.net/37T9ja9dsdlpNxjltP7jcQ "Use role based multi-factor criteria to enforce Multi-factor authentication for all users assigned to specific roles.").

Adaptive authentication policy-based multi-factor criteria
:   Use adaptive authentication to determine when your instance requires MFA. Adaptive authentication uses authentication policies to evaluate criteria like a user's IP address or user groups. For details on the adaptive authentication
    feature, see [Adaptive authentication](https://servicenow-prod.fluidtopics.net/XQ5OEG0LBshxmWwXEKVReg "Use the Adaptive authentication policy framework to enforce contextual authentication controls to the right users at the right time. Adaptive authentication uses authentication policies to evaluate authentication requests and then either deny or allow access to your instance based on the specified policy conditions.").