Multi-factor Authentication system properties
Use system properties to enable and customize MFA to meet your security requirements.
| Property | Description |
|---|---|
| glide.authenticate.multifactor | Enable Multi-factor Authentication.Note: To enforce MFA for API authentication, set the glide.authenticate.multifactor.for_integrations system property to true. MFA is enforced only for users who have already enrolled in MFA. Users who have not enrolled are not affected. |
| glide.authenticate.multifactor.setup.bypass.count | Number of times that a user can choose to skip the setup of MFA. The default is 0. |
| glide.multifactor.onetime.code.validity | Number of minutes that the reset code is valid. See Log in with Multi-factor Authentication. The default is 5.Note: This property is for email OTP validation time. |
| glide.authenticate.multifactor.clock_skew | Number of additional seconds that the reset code is valid. The maximum is `60`. The default is `10`.The instance validates the code entered by the user against the single app-generated code that is generated at the `current time`. You can skew the time window with this property and allow one or more codes to be generated during a time window to be considered valid. The property's value is used in the following calculation: `current time - X/2` and `current time + X/2`, where `X` is the value of this property. If you use the value of `10`, for example, the instance considers any codes that the app generates within the time range `[the current time - 5 seconds]` and `[current time + 5 seconds]` to be valid. Use this property to prevent login issues where the user is unable to enter the correct code in the default time allotted. |
| glide.authenticate.multifactor.remember.browser.enable | Set your instance to prompt a user for MFA when they log in from a new device or browser. The default is yes. |
| glide.authenticate.multifactor.browser.fingerprint.validity | After MFA remembers the browser, the user is not challenged for MFA in the same browser for this duration. The default is 8 hours. |
| glide.authenticate.multifactor.remembered.browser.max.count | The number of browsers MFA remembers for this user. |
| glide.authenticate.multifactor.remember.browser.default | Default value of the remember-browser check box in the validate multi-factor page. |
| glide.webauthn.enabled) | Option to enable passwordless authentication \(FIDO2 based MFA\) methods such as hardware key and biometric authentication. |
| glide.authenticate.multifactor.email.otp.enable | Option to enable email based OTP as a factor for MFA. |
| glide.auth.mfa.ui.v2.enabled | Option to enable MFA factor independently for the users without setting up an authenticator app. |