SMS as an MFA factor
Multi-factor authentication (MFA) with SMS as a factor for your authentication.
Admin can configure ServiceNow instance to require users who attempt to log in to the instance using SMS-based OTP.
When users attempt to log in to ServiceNow, SMS OTP is sent to the mobile number associated with the sys_user record. Users can enter the six-digit verification code that it sent to the mobile device and verify their identity.
You can configure MFA with SMS using the default Twilio as well. For more information, see Multi-factor authentication providers.
[Omitted image "mobile-screen-mfa.png"] Alt text: MFA-SMS
Further the MFA with SMS can be controlled based on the policy input and conditions using filter criteria. Following are the types of filter criteria:
--- title: SMS as an MFA factor description: Multi-factor authentication \(MFA\) with SMS as a factor for your authentication. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/mfa-with-sms.html release: australia product: Authentication classification: authentication topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [MFA factor policies, MFA verification methods, Configuring MFA, Multi-factor authentication, Authentication, Access Management] --- # SMS as an MFA factor Multi-factor authentication \(MFA\) with SMS as a factor for your authentication. Admin can configure ServiceNow instance to require users who attempt to log in to the instance using SMS-based OTP. When users attempt to log in to ServiceNow, SMS OTP is sent to the mobile number associated with the sys\_user record. Users can enter the six-digit verification code that it sent to the mobile device and verify their identity. You can configure MFA with SMS using the default Twilio as well. For more information, see [Multi-factor authentication providers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/multi-factor-authentication-providers.md). \[Omitted image "mobile-screen-mfa.png"\] Alt text: MFA-SMS Further the MFA with SMS can be controlled based on the policy input and conditions using filter criteria. Following are the types of filter criteria: - [IP Filter Criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-ip-filter-criteria.md) - [Role Filter Criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-role-filter-criteria.md) - [Group Filter Criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-group-filter-criteria.md)
| title | SMS as an MFA factor |
| description | Multi-factor authentication \(MFA\) with SMS as a factor for your authentication. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/platform-security/authentication/mfa-with-sms.html |
| release | australia |
| product | Authentication |
| classification | authentication |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | MFA factor policiesMFA verification methodsConfiguring MFAMulti-factor authenticationAuthenticationAccess Management |