Configure Email as an MFA factor

task australia Updated Sep 10, 2026 2 min read configure-mfa-factor-policy-with-email.md

Configure policy input and condition to display Email OTP as an MFA factor policy for authentication.

Before you begin

Role required: adaptive_auth_admin

Procedure

Navigate to All > Multi-factor Authentication > MFA Context.
Select MFA Factor Policies tab.

Note: The EMAIL as MFA Factor with a Policy is available by default. You can edit the policy and specify the policy inputs and conditions.
Select the Display Email OTP as an MFA Factor Policy.

[Omitted image "email-factor.png"] Alt text: Email - Factor
Select New to add Policy Inputs.
Select the filter criteria that you want to create.

Following are the types of filter criteria:
- IP Filter Criteria
- Role Filter Criteria
- Group Filter Criteria For example, Role Filter Criteria.
[Omitted image "mfa-email-filter.png"] Alt text: Filter Criteria
Select Role Filter Criteria, fill the fields for the role filter criteria and submit the record.

The new policy is created. For more information, see Role Filter Criteria.
On the Policy - Display Email OTP as an MFA Factor Policy page, select Policy conditions.
Select New to add Policy Conditions.
On the form, fill in the fields:

Field	Description
Label	Name to identify the condition.
Description	Description of the condition.
Condition	Logical combination of multiple policy inputs (filter criteria) that is used to evaluate authentication requests.Select the role based filter criteria policy that was created for the condition.

10. Select **Submit**.

Repeat step 8 to create additional policy conditions.

Note: If you create multiple policy conditions, the final output of the access policy depends on the logical OR output of all policy conditions. This means the policy will evaluate to true if any one of your policy conditions is met.

Based on the role filter (users) policy and the conditions specified for the role is matched, the Email MFA factor is shown as an options for authentication for the users.

100 lines · 3.5 KB Wrap lines

---
title: Configure Email as an MFA factor
description: Configure policy input and condition to display Email OTP as an MFA factor policy for authentication.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/configure-mfa-factor-policy-with-email.html
release: australia
product: Authentication
classification: authentication
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Email as an MFA factor, MFA factor policies, MFA verification methods, Configuring MFA, Multi-factor authentication, Authentication, Access Management]
---

# Configure Email as an MFA factor

Configure policy input and condition to display Email OTP as an MFA factor policy for authentication.

## Before you begin

Role required: adaptive\_auth\_admin

## Procedure

1.  Navigate to **All** &gt; **Multi-factor Authentication** &gt; **MFA Context**.

2.  Select **MFA Factor Policies** tab.

    **Note:** The **EMAIL** as **MFA Factor with a Policy** is available by default. You can edit the policy and specify the policy inputs and conditions.

3.  Select the **Display Email OTP as an MFA Factor Policy**.

    \[Omitted image "email-factor.png"\] Alt text: Email - Factor

4.  Select **New** to add **Policy Inputs**.

5.  Select the filter criteria that you want to create.

    Following are the types of filter criteria:

    -   [IP Filter Criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-ip-filter-criteria.md)
    -   [Role Filter Criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-role-filter-criteria.md)
    -   [Group Filter Criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-group-filter-criteria.md)
    For example, Role Filter Criteria.

    \[Omitted image "mfa-email-filter.png"\] Alt text: Filter Criteria

6.  Select **Role Filter Criteria**, fill the fields for the role filter criteria and submit the record.

    The new policy is created. For more information, see [Role Filter Criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-role-filter-criteria.md).

7.  On the Policy - Display Email OTP as an MFA Factor Policy page, select **Policy conditions**.

8.  Select **New** to add **Policy Conditions**.

9.  On the form, fill in the fields:

<table id="table_mxz_wyp_znb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Label

</td><td>

Name to identify the condition.

</td></tr><tr><td>

Description

</td><td>

Description of the condition.

</td></tr><tr><td>

Condition

</td><td>

Logical combination of multiple policy inputs \(filter criteria\) that is used to evaluate authentication requests.Select the role based filter criteria policy that was created for the condition.

</td></tr></tbody>
</table>10. Select **Submit**.

11. Repeat step 8 to create additional policy conditions.

    **Note:** If you create multiple policy conditions, the final output of the access policy depends on the logical OR output of all policy conditions. This means the policy will evaluate to true if any one of your policy conditions is met.

    Based on the role filter \(users\) policy and the conditions specified for the role is matched, the Email MFA factor is shown as an options for authentication for the users.