Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Nikhil Bhandari (NIKUBHAN)
Ai4Process
Pega Principal Consultant
Ai4Process
GB
NIKUBHAN Member since 2009 17 posts
Ai4Process
Posted: Mar 9, 2023
Last activity: Jun 28, 2023
Posted: 9 Mar 2023 11:19 EST
Last activity: 28 Jun 2023 10:42 EDT
Closed

How to disable the MFA for Change Password screen?

Client wants to disable MFA in the Change Password screen as some external users find it cumbersome & have trouble with emails. Moreover, it is not a very sensitive application in terms of security. I did not find any option in Security Policy to do the same. Could someone help me with this ?

***Edited by Moderator Marissa to add Capability tags***
To see attachments, please log in.
Pega Platform
Security
Lead System Architect

Posted: 2 years ago
Posted: 28 Jun 2023 10:42 EDT
Marije Schillern (MarijeSchillern)
MOD
Senior Knowledge Management Specialist
Pegasystems Inc.
GB

@NIKUBHAN 

To disable Multi-Factor Authentication (MFA) in the Change Password screen, you need to update the security policies settings. Follow these steps:

  1. In Dev Studio, click Configure > Org & Security > Authentication > Security Policies.
  2. Locate the Multi-factor authentication policies (using one-time password) section.
  3. To disable MFA, you can either remove the configurations for the email and SMS accounts used to send one-time passwords or adjust the Maximum one-time password failure attempts, Maximum age of one-time password token in seconds, and Validity of one-time password confirmation in minutes to less restrictive values.
  4. Click Submit to save the changes.

Please note that disabling MFA may reduce the security of your application.

Configuring multi-factor authentication policies

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice