Multi-factor authentication (MFA) is a security measure that requires users to provide an additional form of identification during the sign-in process. MFA is enabled by default for new Content Innovation Cloud customer accounts, and it applies to all users who sign in using their local Content Innovation Cloud credentials.
When MFA is enabled, users are required to enter a verification code each time they sign in using local authentication. A verification code (also called a time-based one-time password, or TOTP) is a six-digit code generated by an authenticator app. The first time a user signs in after MFA is enabled, the user must register an authenticator app with the Content Innovation Cloud. Any authenticator app that produces six-digit codes can be used. Examples include Google Authenticator and Microsoft Authenticator.
The Content Innovation Cloud does not enforce MFA for users who are authenticated using an external identity provider. For information about enabling MFA for your identity provider, refer to the product documentation for your identity provider.