Excluding email domains for MFA

Required pack: Le Privé
Allowed profile: Brand manager

Once multi-factor authentication (MFA) has been activated (see how to enable MFA), it applies to all user email domains by default. However, it is possible to exclude specific email domains from MFA enforcement, this can be useful for email domains where SSO has been enabled.
 

1. Navigate to the Settings wheel > Settings
    
2. Click on the Security tab
    
3. Click on Manage domains (top right)
    
4. Click on the dropdown menu to view all email domains — all are selected by default
    
5. Uncheck the email domains for which you want to disable MFA
   💡 Tip: To apply MFA to only one specific domain, use the "Deselect all" bulk action to disable MFA across all domains, then manually select the single domain where MFA should be enforced.
    
6. Click Save in the pop-up to confirm
    
7. Click Save (top right of Security page) to apply all changes