Configure MFA settings

Last update:
Aug 21, 2026
Scenario
An administrator needs to configure Multi-factor authentication (MFA) settings for an application in the Aikyam Identity Console (AIC) to strengthen account security and reduce the risk of unauthorized access. MFA adds an extra verification step beyond username and password (or passkey), helping protect sensitive healthcare data and supporting compliance requirements. By configuring MFA settings, the administrator can enforce stronger authentication for all users, apply risk-based controls (adaptive MFA), or allow controlled exceptions for trusted environments based on business needs.
Prerequisites
  • Administrator has access to the Applications page with role-based permissions.
  • The application is already registered in AIC.
  • MFA requirements (Adaptive / MFA / Bypass, allowed methods, recovery approach) are finalized.
Roles authorized
  • Application administrator
Steps
  1. Sign in to Aikyam Identity Console.
  2. Navigate to Applications from the left navigation pane.
  3. Search for and select the application you want to configure.
  4. Go to the SSO tile.
  5. Click View & Update.
  6. Open the Authentication config tab.
  7. Configure MFA type (Adaptive authentication, Multi-factor authentication, or Bypass).
  8. Configure authentication methods as needed:
    • Primary methods (Password, Passkey)
    • Secondary methods (Phone OTP, Email OTP, Authenticator)
  9. Configure recovery controls: Account recovery type and Recovery method.
  10. (Optional) Configure RBA whitelist and add trusted IP ranges.
  11. Click Save to apply changes.
Note:
  • Adaptive Authentication is recommended for dynamic enforcement based on risk signals.
  • Enable strong secondary methods like Phone OTP or Authenticator where needed.
  • Use RBA whitelist only for trusted networks to reduce MFA prompts.

On this page

Powered by Aikyam @2025 All rights reserved