Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Workspace settings

Workspace settings

What happens to people without MFA when I make it mandatory?

Quick answer

When you require MFA, anyone without it gets a prompt at their next login to set up an authenticator app. People who already have MFA see no change. SSO users are the exception: their identity provider handles MFA instead.

The short version

People without MFA get a prompt to set up an authenticator app the next time they sign in. Nobody loses an account. Cyberlop does not lock anyone out in advance, and the prompt is the only change people see when they next sign in.

How it works in Cyberlop

MFA is optional by default. The status pill on Settings → Two-factor auth then says MFA is optional and users are not prompted to enrol. To change that, tick Require MFA for all users and click Save MFA settings.

After you save, everyone must set up a TOTP authenticator app. People with MFA see no change. Everyone else gets a prompt at their next login, and the app asks them to enrol an authenticator before they carry on.

PersonWhat happens
Has MFA alreadySigns in with before
No MFA yetIs prompted at next login to set up an authenticator app
Signs in with SSOTheir identity provider handles MFA

Expect the prompt at the next sign-in. No sooner.

What to do next

Tell your team before you switch it on, so the prompt does not catch them off guard. Ask them to have an authenticator app ready on their phone.

Steps for admins are in making two-factor authentication mandatory. If nobody sees a prompt after saving, read why no one gets an MFA prompt. For SSO users, see why they skip Cyberlop's MFA.

Full tutorial

Two-factor authentication: require MFA for everyone who signs in

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.