Why isn't anyone being asked to set up MFA?

Why this happens

Cyberlop does not force MFA by default. The status pill says so: "MFA is optional — users are not prompted to enroll." Until you change the setting, people can use the app with a password alone, and nobody sees a prompt.

The setting lives in its own section on the Settings page, apart from any other option. A second reason applies if your organisation uses single sign-on. In that case Cyberlop hands MFA to your identity provider, so the sign-in screen may never ask for an authenticator code from Cyberlop itself.

How to fix it

1. Open Settings as an administrator.
2. Choose Two-factor auth. The method is a TOTP authenticator app.
3. Tick Require MFA for all users. The help text says everyone must set up an authenticator app.
4. Press Save MFA settings.
5. Ask a colleague to sign in again. The app prompts users without MFA at their next sign-in.

Still not working?

• You may lack permission to change settings. Ask an administrator to do it.
• If you use single sign-on, set the second factor in your identity provider. See why SSO users do not see Cyberlop MFA.
• People already signed in see the prompt only the next time they sign in.

To see what changes for people, read what happens once you require MFA. For anything else, use /contact.

Our glossary entry on MFA explains the idea.

Related questions

• How do I make two-factor authentication mandatory for my workspace?
• What happens to people without MFA when I make it mandatory?
• Why aren't SSO users asked for Cyberlop's own MFA?
• How do I set up single sign-on with my identity provider?
• I'm locked out after several failed sign-in attempts. What happened?

Full tutorial

Two-factor authentication: require MFA for everyone who signs in

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre