Configure MFA with SSO

---
title: Configure MFA with SSO
description: Enforce MFA with SSO for your users within or outside your organization.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/configure-mfa-with-sso.html
release: australia
product: Authentication
classification: authentication
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [MFA with SSO, Configuring MFA, Multi-factor authentication, Authentication, Access Management]
---

# Configure MFA with SSO

Enforce MFA with SSO for your users within or outside your organization.

## Before you begin

The MFA with SSO feature is offered as a part of the Adaptive Authentication plugin \(com.snc.adaptive\_authentication\). You must enable the Adaptive authentication property for using MFA with SSO feature. To know more on how to set up Adaptive authentication, see [Adaptive authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/adaptive-authentication.md).

**Note:** MFA with SSO login is available if the **glide.authenticate.mfa.with.multisso.enabled** property is set to **true**.

Role required: adaptive\_auth\_admin, sso\_config\_admin

## Procedure

1.  Navigate to **All** > **Multi-factor Authentication** > **Properties**.

2.  Enable the **Enable Multi-factor authentication** and **Enable Multi-factor Authentication with SSO** check boxes.

    \[Omitted image "mfa-sso-properties.png"\] Alt text: Enable MFA for SSO.

3.  Select **Save**.

4.  Navigate to **Multi-factor Authentication** > **MFA Context**.

    The MFA Context form appears.

    \[Omitted image "mfa-auth-context.png"\] Alt text: MFA Auth Context

    **Note:** By default, the policy is **Step-Up MFA Policy**. Users are shown with Multi-factor Authentication if a condition configured in **Step-Up MFA Policy** evaluates to **true**. Policy takes precedence over the user or role-based configuration.

5.  To edit a policy, go back to the Authentication Policy record, change the conditions, and come back.

    When you navigate to the Authentication Policy record, you can add or edit the 'Policy Inputs' to the referenced Policy fields, **Step-Up MFA Policy** or **Step-Down MFA Policy**.

6.  To set a new policy condition, select **Policy Conditions**.

7.  Select **New**.

8.  On the form, fill in the fields.

<table id="table_ihs_5ym_bmb"><thead><tr><th>

Fields

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Label

</td><td>

Unique name for the condition that you want to create for the label.

</td></tr><tr><td>

Description

</td><td>

The policy condition description.

</td></tr><tr><td>

Conditions

</td><td>

The type of condition that you want to apply for the policy. You can add filter conditions and 'OR' clauses.**Note:** Adding various filter conditions and clauses enables you to challenge MFA for specific users.

</td></tr></tbody>
</table>    \[Omitted image "mfa-sso-new-record.png"\] Alt text: Condition - New record

    To set up your conditions, consider the following example. Assume that you want the authentication scheme with the identity provider as your condition for external users. You can set the conditions as follows:

    1.  Select **Authentication Scheme** and set the criteria as **Single Sign-On** or **Username and Password**.

        Based on this selection, the user is provided with an SSO-based login or login form to specify the user name and password.

    2.  Select **Identity Provider** and specify the provider as the IDP record for which you want to enable MFA. For example, **Okta**.
    Based on this selection, if the user logs in with SSO, the user is not challenged with MFA. In contrast, if the user logs in using Okta, then the user is challenged with MFA.

9.  Select **Submit**.


**Related topics**  


[Adaptive authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/adaptive-authentication.md)

[Multi-factor Authentication with Single Sign-On](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/mfa-sso.md)