How to set up multi-factor authentication (MFA)

Overview

The Multi-Factor Authentication tool was added to Moodle core from version 4.3. This has been updated to work with IOMAD to allow for a default setup for every tenant or to enable a different setup for an individual tenant. The Moodle documentation for this tool is available here.

Configuring MFA for IOMAD follows the same steps as for Moodle, except where multi-tenancy is impacted. This means you either need to select a tenant first or deselect a tenant to make changes to the default setup.

How to configure the default site MFA settings

1. Go to the IOMAD dashboard.
2. Click on the X next to the current tenant in the company selector (shown below as My Company).
   
   
3. This will change the text to Select a Company (shown below):
   
   Leave it like this so MFA will be configured for the default setting.
4. Go to Site administration -> Plugins -> Admin tools -> Manage Multi-factor authentication.
5. Once you’re in the tool menu, you have multiple factors for configuration, each of which needs to be saved in its individual settings.

How to configure MFA for a specific tenant

1. Choose the tenant you want to change the MFA settings for within the IOMAD dashboard.
2. Navigate to Site administration -> Plugins -> Admin tools -> Manage Multi-factor authentication.

Any changes you make now will be only for the selected tenant and no other.

How to disable MFA for a specific tenant

1. Choose the tenant you want to disable MFA for from within the IOMAD dashboard.
2. Navigate to Site administration > Plugins > Admin tools > Manage Multi-factor authentication.
3. If MFA has not yet been configured for this tenant, click on the MFA plugin-enabled option then click Save changes (this creates their initial settings).
4. Disable the MFA default settings for this tenant by deselecting the MFA plugin-enabled option and clicking Save changes.

This tenant no longer requires MFA.