This article reviews MFA configurations for Multi-Instance organizations.
For Multi-Instance organizations, MFA configurations are designed to provide consistency with the following:
- MFA Methods are controlled at the organization level, and all associated Instances will use the same configuration
- User Roles that are shared across Instances will share MFA requirement settings
- Users with Multi-Instance access will use the same MFA Authentication Enrollments and frequency across all Instances that they have access to
Note: MFA is only available as part of the R365 Professional Package. Contact your CSM or Account Executive to learn how MFA can enhance your R365 experience!
Shared MFA Methods
For Multi-Instance organizations, MFA Methods are automatically shared across Instances, and the 'Allowed MFA methods' setting will be indicated with the 'Shared' icon 
.
Changing the shared MFA Methods will prompt the User to confirm that they intend to change the MFA Methods of all Instances within the organization.
Shared User Roles
When a Custom User Role is shared across Instances, the MFA requirement settings will also be shared. Shared User Roles are indicated with the 'Shared' icon 
. Learn more about Shared User Roles here.
Changing the 'MFA Required' or 'Require MFA (per device)' settings will prompt the User to confirm that they intend to make these changes for all Instances within the organization.
Users With Multi-Instance Access
For Users with Multi-Instance access, MFA settings will apply to all Instances that they have access to, and the User will use the same MFA Authentication Enrollments at all Instances. The User's MFA settings can be adjusted on their User Record within any Instance, and those changes will be updated in all Instances that they can access.
If the User has different User Roles at the various Instances that they can access, the available MFA frequency options will be limited to the most restrictive setting from all of their assigned User Roles across all Instances.
