> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/configure-mfa.md).

# Configure MFA

This step decides how people prove who they are. It has two halves, and keeping them apart is the thing that makes the rest of the configuration make sense.

**Organisation-wide**, you decide which authentication methods exist at all — which factors are enabled in the tenant, how strong each one counts as, and the rules governing the ones that need them. That is *Auth Modes*, and it sets the menu.

**Per application**, you decide which of those methods a particular application demands at sign-in. That is done under **Manage Resources** when you configure the application, not here.

So a method has to be enabled organisation-wide before any application can ask for it, and enabling it organisation-wide does not by itself make any application use it. Both steps are needed.

## Order of work

{% stepper %}
{% step %}

## Enable the methods you intend to support

Set their category and priority.
{% endstep %}

{% step %}

## Configure password authentication

If password is one of them, configure it — it carries its own policy settings.
{% endstep %}

{% step %}

## Apply the methods to each application

Apply the methods as you register each application.
{% endstep %}
{% endstepper %}

Do this before you register applications, so the methods are available to choose from when you get there.

## A note on adaptive authentication

What is configured here is the fixed requirement — the factors an application always asks for. Raising or lowering that requirement based on risk, location or device is adaptive authentication, and it is set up separately in **Adaptive authentication and risk profiles**.

## In this section

| Page                                | What it covers                                                          |
| ----------------------------------- | ----------------------------------------------------------------------- |
| Authentication modes                | Enabling and disabling methods, and setting category and priority       |
| Multiple login options              | The login methods a user can be offered, and how they appear at sign-in |
| Configuring password authentication | Password policy and its authentication settings                         |
| Applying methods to an application  | Choosing which methods a given application demands                      |