Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multifactor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.
Which configuration will meet this requirement?

Question

Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multifactor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.

Which configuration will meet this requirement?

Lucile Jeanneret · Accepted Answer

Enable "MFA for User Interface Logins" for your organization from Setup -> Identity Verification.

Lucile Jeanneret · Answer

Create and assign a permission set to all employees that includes "MFA for User Interface Logins."

Lucile Jeanneret · Answer

Create a custom login flow that enforces MFA and assign it to a permission set. Then assign the permission set to all employees.

Lucile Jeanneret · Answer

For all employee profiles, set the Session Level Required at Login to High Assurance and add the corporate identity provider to the High Assurance list for the org's Session Security Levels.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 218 - Certified Identity and Access Management Architect discussion

Suggested answer: C

0 comments