Applying an MFA policy to users
Note
This feature is at the Preview stage.
For an MFA policy to apply to user accounts, you need to explicitly add the relevant users or the groups they are members of to the policy's target groups.
-
Log in to Yandex Identity Hub.
-
In the left-hand panel, select Security settings.
-
Navigate to the MFA policies tab and select the policy you need from the list. In the window that opens:
-
Go to the Users and groups tab.
-
To add a new user or group to the policy's target groups:
- Click Add users.
- In the window that opens, select the required user or user group.
- Click Add.
-
To delete a user or group from the policy:
- In the list of users and groups, click and select Delete next to the user or user group.
- Confirm the deletion.
-
Note
You can add any type of user accounts to the MFA policy target groups, but the policy will only apply to federated and local user accounts.
If a group added to an MFA policy includes users with different account types, the policy will only apply to users with federated and local accounts.