Advice for organisations on implementing strong methods of multi-factor authentication (MFA) for accessing corporate online services.
This guidance describes how administrators responsible for managing access to online digital services for their organisation can apply the strongest types of multi-factor authentication (MFA). It describes the various types of MFA that are commonly available, explains some pitfalls to avoid, and encourages the use of services that support the strength of MFA you require.
- For advice on authenticating customers for an online service that you provide, refer to our guidance ‘Authentication methods: choosing the right type’.
- For advice on protecting your personal accounts with 2-step verification, refer to our guidance on Setting up 2-Step Verification (2SV).
In this guidance
- Why multi-factor authentication matters
- Recommended types of multi-factor authentication
- Mandating strong multi-factor authentication for access to sensitive data
- Gaining trust in devices
- Avoiding multi-factor authentication anti-patterns
- Choosing online services with the right authentication
Find out more about implementing strong methods of MFA here.
Related content
We are proud to be supporting Take Five to Stop Fraud with their campaign, The Art of Impersonation. Criminals are experts at impersonating people and organisations we trust, such as the police, your bank, a delivery or utility company, friends […]
Shadow IT refers to the use of unknown assets in an organisation without the knowledge or approval of the IT department.
The NCSC has published new guidance on how to identify and reduce the levels of shadow IT in your organisation
As you prepare for a summer holiday filled with adventure and relaxation, it’s essential to consider the security of your digital devices. From smartphones to laptops, these devices hold valuable personal information that can be vulnerable to cyber threats when you’re away from home.