How to Reset or Disable MFA (Multi-Factor Authentication) for Qlik Sense SaaS

[Anonymous]

Multi-Factor Authentication (MFA) adds additional security for logging into Qlik Cloud Services. Qlik recommends enabling MFA on your Qlik account.

If the device used for MFA is bein replaced, or if MFA needs to be disabled temporarily, this can be achieved in your My Qlik Portal.

1. Log in to My Qlik and navigate to your Password & Security settings.
   
   You can also access this by clicking on your profile picture, selecting Profile settings, and choosing Password & Security
   
   
   
   
2. Reset or Disable Multi-Factor Authentication:
   
   
   • To Reset MFA, press Reset In the Multi-Factor Authentication tile and set it up again by following the steps How to Setup Multi-Factor Authentication (MFA) for Qlik Sense SaaS
   • To Disable MFA, click Remove

[acardella]

hi @Sonja_Bauernfeind and @Jamie_Gregory 

it is possible to activate MFA to ALL tenant users once?
it also possible to DISABLE "reset/remove" button ? 

I don't want that each user can decide if the mfa auth is active or not.

This would be a TENANT admin right.

thanks for helping me

[Sonja_Bauernfeind]

Hello @acardella 

MFA cannot currently be enforced for QlikID users (different QlikIDs can be used on different tenants). If you require MFA to be mandatory, you can bring your own IdP with a Qlik Sense SaaS Enterprise subscription (not available for Business subscriptions).

In addition, we have an active suggestion gathering feedback currently which may interest you: Enforced MFA and/or Google SSO for Qlik Sense Business SaaS 

All the best,
Sonja 

[acardella]

In a time of growing concern about security risks, I think the ON/OFF on MFA should be at TENANT level, not at single user level.

however...

Is the BYOIDP request made when the tenant is activated?

We have a customer with QSEE with the specific request to activate MFA and this can be a good lever to migrate it to the cloud.

If I need to use an external IDP also in the cloud then I can configure onpremise authentication via SAML/OIDC and keep everything where it is now

thanks

[Sonja_Bauernfeind]

Hello @acardella 

I understand the requirement and would urge you to provide your feedback and vote on the idea that I linked above. We also have an internal product suggestion active, but the more feedback we can gather from our customers in the ideation section, the better.

If you are moving a customer from an Enterprise Solution (Qlik Sense Enterprise on Windows) over to the Cloud, using the Enterprise subscription is recommended to make use of its enterprise-level capabilities. Including giving you (and your customer) control over what IdP you wish to use: Identity providers.

All the best,
Sonja 

[acardella]

thanks Sonja.

i don't know why... but i'm unable to login at ideation.qlik.com.

there's some request to do to be enable ?

thanks

[Sonja_Bauernfeind]

Hello @acardella 

It should be enabled for everyone by default. If it gives you trouble, try this:

1. Go to Ideation
2. Select Browse and Suggest
3. Click the little Login help button next to Suggest Features
   
   
4. Click Learn more
   
   
   
   
5. Now click authenticate me
   
   

Hope this helps! 

[acardella]

thanks.

it was enough to connect to the home page and click "Now click authenticate me"

i did it

thanks