Improving MFA with Workspace ONE Access and User Choice of Authentication Method

Since January 2024, the Workspace ONE Access SaaS instances have a new feature that is bringing MFA to the next level for users. While I created some videos during that time, I somehow never documented it in a blog, so I finally did this in July 2024.

To use the choice of authentication, go to Resources and select the Policies option

I decided to create a new policy, so I used the ‘Add Policy’ option, but you can also update an existing policy.

When your specify the Authentication you now have a “OR” where you can add multiple Methods to fit to your needs. In the end just save it and assign it to the specific Apps.

Once saved it will be active and Users can use it directly.

I created a Video to show the whole Process for the Admin for better understanding:

Device Demo

On the Device the User will have the Choice of what Authentication Method he wants to use:

In this demo, I want to show how to log in with single-factor authentication and then let the user decide, upon app launch, which multifactor authentication method they want to use. As a user, I selected the FIDO2 key, so I tapped it on the back of the device to log in

Leave a Reply

Your email address will not be published. Required fields are marked *.

You may use these <abbr title="HyperText Markup Language">HTML</abbr> tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

This site uses Akismet to reduce spam. Learn how your comment data is processed.

BCF Shop Theme By aThemeArt.