Administer MFA
You must be a Partner Super Admin to see the Administer MFA page.
You can search for your managed users or customers and reset their MFA settings if they lose the mobile device containing their authenticator app, change their mobile number, or if there are other security-related reasons.
Restriction
If you use Single Sign-On (SSO) to sign in to a Central customer tenant from your Partner dashboard, you can't change the MFA settings of the customer's Super Admins.
To view a list of admins, click the Global Settings icon
in the taskbar. Click Access Control > Admin & Roles, then click Admins.
Restrictions
- You can only search email addresses that's associated with a Partner account. See Admins.
- You must enter the user's full email address.
- You won't see any indications or error messages if nothing is found when you search for an email address.
Reset MFA for a managed user
To search and reset a managed user's MFA settings, do as follows:
- Click the Global Settings icon
. - In Access Control, click Administer MFA.
- Enter the user's or customer's full email address.
-
In the Action column, click Reset MFA.
You'll see an indication at the bottom of the page if the MFA reset is successful.
Note
If you reset an admin's MFA setting, the admin must set up their MFA again.
Reset MFA for a customer's user
To reset MFA for a customer's user, do as follows:
- Go to My Business > My Customers.
- Click Customers.
- On the Sophos Central Customers page, select a customer that you want to reset MFA for.
-
Click Launch customer.
The customer account is launched and you're redirected to the dashboard.
-
Go to My Environment > Users & Groups.
-
On the Users & Groups page, select the user that you want to reset MFA for.
The user's profile displays.
-
Click Reset MFA.
A successful MFA reset message displays on the lower-right of the page.