cancel
Showing results for 
Search instead for 
Did you mean: 
snarfed
New Contributor

Multifactor Authentication policy not enforcing MFA enrollment on account creation

Hi! I'm an admin on a LastPass Teams account. I want to require all new accounts to enroll in MFA, so I turned on the Multifactor Authentication policy on https://lastpass.com/company/#!/settings/policies , for all users, which - if I understand right - should require all new users to enroll in MFA when they're first invited and create their account. Right?

 

Except that's not happening. Newly invited users aren't getting prompted (much less required) to enroll in MFA when they create their accounts. Any idea why not?

 

Thanks in advance!

 

snarfed_0-1644442448246.png

snarfed_1-1644442466843.png

 

1 REPLY 1
AKHBGT
Active Contributor

Re: Multifactor Authentication policy not enforcing MFA enrollment on account creation

Make sure you have a "Default" or what some are calling a "Primary" Multifactor selected.

 

As an example, we made Google Auth the Default MFA, but then we started to activate LastPass MFA and we did it in a very scheduled manner (log the user out, forcing them to reset up the NEW MFA enrollment, otherwise they won't have that challenge show up until their next session timeout).