Requiring MFA for FusionAuth Admin Portal Access
-
We recently had a security audit in which it was found that going to the Admin portal for managing FusionAuth does not require MFA. Is this something that can be enabled so it forces someone to use 2-Factor authentication?
-
Thanks for the question! If you navigate to Applications > Index View - FusionAuth > Multi-Factor Tab then you can see an option to require MFA for the FusionAuth Admin UI Application. You will likely want to enable application specific trust as well.
-