ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.
Support / SUP-1125

Marlow: can we require MFA for everyone, not only admins?

Project
Support
Type
Question
Status
Done Done
Priority
Medium
Organization
Marlow Cold Chain
Reporter
Kerry Doyle <kerry.doyle@marlow.example>
Assignee
Ines Costa <ines.costa@acme-hq.example>
Labels
marlow-cold-chainmfafeature-request
Components
identity-service
Created
25 Aug 2026, 09:20 UTC
Updated
25 Aug 2026, 12:00 UTC
Resolved
25 Aug 2026, 12:00 UTC

Description

Can we require MFA for everyone, not only admins? Our insurer asked.

Comments (4)

Ines Costa · 25 Aug 2026, 10:00 UTCInternal note

Mira, anything planned beyond administrators?

Mira Holm · 25 Aug 2026, 11:05 UTCInternal note

No. MFA is required for administrators since June. Everyone else signs in with a password, a phone code or their company's single sign-on, where their own MFA applies. Nothing planned for members.

Ines Costa · 25 Aug 2026, 11:30 UTC

Hi Kerry, MFA is required for every administrator; for everyone else it isn't available. If your insurer's concern is the portal: only administrators can change people, roles and settings, and all of them use MFA. If they need MFA for every user, single sign-on through your own Entra ID or Okta lets you require it yourselves. Happy to explain that route.

Kerry Doyle · 25 Aug 2026, 12:00 UTC

We're on Google Workspace, not Microsoft or Okta. Will check what the insurer actually needs.