MFA types · SN Doc Reader

MFA types

concept australia Updated Sep 10, 2026 1 min read faq-mfa-types.md

FAQ related to MFA types and why it’s important.

What are the types of verification methods that are available for MFA with ServiceNow?

ServiceNow base system supports these verification methods.
1. Passkey
2. TOTP Authenticator apps such as Google Authenticator, Okta Verify, Microsoft Authenticator, Authy, DUO
3. Biometric Authenticator (FIDO2) such as Windows Hello, Apple Touch ID, Face ID, Android fingerprint sensor.
4. Hardware Security Keys (FIDO2) such as YubiKey, Thetis
5. Email one-time password (OTP)
6. SMS OTP - Multi-factor authentication with SMS plugin (com.snc.authentication.sms_mfaplugin) installation and factor configuration are required to enable SMS OTP-based MFA.
Can a user configure multiple MFA factors or verification methods?

Yes, you can enroll for multiple MFA factors by visiting their user profile. For example, you can enroll a laptop with biometric authenticator, use the mobile phone with a passkey, and have an authenticator app set up.
What steps must users perform to complete the MFA setup?

User can perform either of the following MFA options.

[Omitted image "new-mfa.png"] Alt text: MFA screen

Refer to the Multi-factor authentication documentation for more information about MFA setup.
Can the SMS and Email OTP-based MFA be limited to certain users?

Admin can set up MFA factor policies for email and SMS OTP-based MFA factors to limit these factors to certain user groups or roles.
The users don’t have a mobile phone where they can set up an authenticator app. How can these users enable MFA?

From the Xanadu release onwards, you can use a biometric authenticator, passkeys, FIDO2 hardware security keys, and email OTP-based MFA without requiring an authenticator app setup on the mobile phone.
How do end users set up MFA?

Refer to the Using Multi-factor authentication documentation for more information about MFA setup.

54 lines · 2.7 KB Wrap lines

---
title: MFA types
description: FAQ related to MFA types and why it’s important.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/faq-mfa-types.html
release: australia
product: Authentication
classification: authentication
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Frequently asked questions, MFA enforcement, Multi-factor authentication, Authentication, Access Management]
---

# MFA types

FAQ related to MFA types and why it’s important.

1. What are the types of verification methods that are available for MFA with ServiceNow?

ServiceNow base system supports these verification methods.

1. Passkey
2. TOTP Authenticator apps such as Google Authenticator, Okta Verify, Microsoft Authenticator, Authy, DUO
3. Biometric Authenticator \(FIDO2\) such as Windows Hello, Apple Touch ID, Face ID, Android fingerprint sensor.
4. Hardware Security Keys \(FIDO2\) such as YubiKey, Thetis
5. Email one-time password \(OTP\)
6. SMS OTP - Multi-factor authentication with SMS plugin \(com.snc.authentication.sms\_mfaplugin\) installation and factor configuration are required to enable SMS OTP-based MFA.
2. Can a user configure multiple MFA factors or verification methods?

Yes, you can enroll for multiple MFA factors by visiting their user profile. For example, you can enroll a laptop with biometric authenticator, use the mobile phone with a passkey, and have an authenticator app set up.

3. What steps must users perform to complete the MFA setup?

User can perform either of the following MFA options.

\[Omitted image "new-mfa.png"\] Alt text: MFA screen

Refer to the [Multi-factor authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/mfa-landing.md) documentation for more information about MFA setup.

4. Can the SMS and Email OTP-based MFA be limited to certain users?

Admin can set up MFA factor policies for email and SMS OTP-based MFA factors to limit these factors to certain user groups or roles.

5. The users don’t have a mobile phone where they can set up an authenticator app. How can these users enable MFA?

From the Xanadu release onwards, you can use a biometric authenticator, passkeys, FIDO2 hardware security keys, and email OTP-based MFA without requiring an authenticator app setup on the mobile phone.

6. How do end users set up MFA?

Refer to the [Using Multi-factor authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/mfa-use.md) documentation for more information about MFA setup.