Overview
A Company Admin can require MFA for everyone in the organization.
Once enforced, every user signing in with a username and password must set up an authenticator app.
Users who sign in through SSO are not affected.
Important
From July 1, 2026 at 9:00 AM PT, MFA will be required across Xakia for all users who log in with a username and password. Turning it on for your organization ahead of that date gives your team time to prepare.
Enforce MFA for your team
A user with Company Admin access can follow these steps:
Click Admin in the top navigation menu.
Click Company Admin in the top left corner.
On the Users tab, find the field Enforce MFA for all users.
Toggle it to On.
Every user will then need to enter a code from their authenticator app (such as Google or Microsoft Authenticator) each time they log in, in addition to their username and password.
Note
MFA is automatically turned off for users who sign in through single sign-on / federated identity, since authentication is handled by your identity provider. If some of your locations use SSO and others don't, only the non-SSO users are prompted to set up MFA.
Help your team get ready
Point your team to Set Up MFA For Individual Users so they can install an app and set up before enforcement begins.
Remind them to save their backup codes somewhere safe when they set up MFA, and to turn on cloud backup in their authenticator app for extra protection. If anyone gets locked out, see Fix Issues With MFA.