Multi-Factor Authentication for Administrators

This page describes how account administrators can manage multi-factor authentication (MFA) settings for all users on a Barracuda Cloud Control (BCC) account.

Set MFA to Required for All Users

When you set MFA to Required, all users on the account (including users on partner accounts that administer it) must sign in with MFA. Users who have not yet configured an MFA device will be prompted to set one up on their next sign-in.

To set MFA to Required:

1. In BCC, navigate to the Settings > Admin > Options page.

2. In the Multi-Factor Authentication section, select Required.

Open

4. Click Save.

Set MFA to Optional

When you set MFA to Optional, users can choose whether to enable MFA for their own account from their My Profile page. To disable MFA when it is optional, a user must delete all of their MFA devices.

To set MFA to Optional:

1. In BCC, navigate to the Settings > Admin > Options page.

2. In the Multi-Factor Authentication section, select Optional.

3. Click Save.

Reset MFA for a User

If a user loses or breaks their MFA device and cannot sign in, you can reset MFA for that user.

1. In BCC, navigate to the Settings > Admin > Users page.

2. Click on the user's name.

3. In the User Details section, click Reset MFA Settings.

   Open

   

4. A confirmation dialog displays. Click OK to confirm.

   Open

   

5. An email notification is automatically sent to the user.

What happens next depends on whether MFA is required or optional for the account:

• If MFA is Required – The user can sign in with only their email and password on their next attempt. They will then be immediately redirected to the MFA setup page to configure a new device. After setup, they must sign in with MFA going forward.

• If MFA is Optional – The user can sign in with only their email and password. They can choose to add a new MFA device from Settings > My Profile if they wish to re-enable MFA.