diff --git a/docs/documentation/platform/mfa.mdx b/docs/documentation/platform/mfa.mdx index 69a84fdd4..1f61fae5c 100644 --- a/docs/documentation/platform/mfa.mdx +++ b/docs/documentation/platform/mfa.mdx @@ -4,19 +4,18 @@ sidebarTitle: "MFA" description: "Learn how to secure your Infisical account with MFA." --- -MFA requires users to provide multiple forms of identification to access their account. Currently, this means logging in with your password and a 6-digit code sent to your email. +MFA requires users to provide multiple forms of identification to access their account. ## Email 2FA -Check the box in Personal Settings > Two-factor Authentication to enable email-based 2FA. +If 2-factor authentication is enabled in the Personal settings page, email will be used for MFA by default. -![Email-based MFA](../../images/mfa-email.png) +![Email-based MFA](/images/mfa-email.png) - - Infisical currently supports email-based 2FA. We're actively working on - building support for other forms of identification via SMS and Authenticator - App. - +## Mobile Authenticator 2FA + +You can use any mobile authenticator app (Authy, Google Authenticator, Duo, etc.) to secure your account. After registration with an authenticator, select **Mobile Authenticator** as your 2FA method. +![Authenticator-based MFA](/images/mfa-authenticator.png) ## Entra ID / Azure AD MFA @@ -25,32 +24,39 @@ Check the box in Personal Settings > Two-factor Authentication to enable email-b We also encourage you to have your team download and setup the [Microsoft Authenticator App](https://www.microsoft.com/en-us/security/mobile-authenticator-app) prior to enabling MFA. + - - ![Entra Infisical app](../../images/platform/mfa/entra/mfa_entra_infisical_app.png) - - - ![conditional access](../../images/platform/mfa/entra/mfa_entra_conditional_access.png) - - - ![create policy](../../images/platform/mfa/entra/mfa_entra_create_policy.png) - - - ![require MFA and review policy](../../images/platform/mfa/entra/mfa_entra_review_policy.png) - - By default all users except the configuring admin will be setup to require MFA. - Microsoft encourages keeping at least one admin excluded from MFA to prevent accidental lockout. - - - - ![enable policy and confirm](../../images/platform/mfa/entra/mfa_entra_confirm_policy.png) - - - ![mfa login](../../images/platform/mfa/entra/mfa_entra_login.png) - - If users have not setup MFA for Entra / Azure they will be prompted to do so at this time. - - - \ No newline at end of file + + ![Entra Infisical + app](/images/platform/mfa/entra/mfa_entra_infisical_app.png) + + + ![conditional + access](/images/platform/mfa/entra/mfa_entra_conditional_access.png) + + + ![create policy](/images/platform/mfa/entra/mfa_entra_create_policy.png) + + + ![require MFA and review + policy](/images/platform/mfa/entra/mfa_entra_review_policy.png) + + By default all users except the configuring admin will be setup to require + MFA. Microsoft encourages keeping at least one admin excluded from MFA to + prevent accidental lockout. + + + + ![enable policy and + confirm](/images/platform/mfa/entra/mfa_entra_confirm_policy.png) + + + ![mfa login](/images/platform/mfa/entra/mfa_entra_login.png) + + If users have not setup MFA for Entra / Azure they will be prompted to do + so at this time. + + + diff --git a/docs/images/mfa-authenticator.png b/docs/images/mfa-authenticator.png new file mode 100644 index 000000000..2a72042ed Binary files /dev/null and b/docs/images/mfa-authenticator.png differ diff --git a/docs/images/mfa-email.png b/docs/images/mfa-email.png index f592ee239..01f3a23f8 100644 Binary files a/docs/images/mfa-email.png and b/docs/images/mfa-email.png differ