---
schema_version: "1"
id: f75c9c06f4357978797b680f8e4c56c7ceb983a2fa8908c9127d92bd326bb33a
title: Enable and Require MFA for Marketing Cloud Engagement
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_mfa_transition.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_mfa_transition.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: bb595905da46bf1c1aa9baa96e72fb08792004149595a59208030b6c7bd5e2d0
description: For most tenants, multi-factor authentication (MFA) is integrated with the Marketing Cloud Engagement login experience and can’t be disabled. If Salesforce hasn’t made MFA mandatory for your tenant yet, you should do so yourself as soon as possible. Follow these steps to transition from Identity Verification (IDV) to multi-factor authentication (MFA).
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Enable and Require MFA for Marketing Cloud Engagement

For most tenants, multi-factor authentication (MFA) is integrated with the Marketing Cloud Engagement login experience and can’t be disabled. If Salesforce hasn’t made MFA mandatory for your tenant yet, you should do so yourself as soon as possible. Follow these steps to transition from Identity Verification (IDV) to multi-factor authentication (MFA).

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_marketing_cloud_overview-264-0-0-production-enus/2555afdb-8049-4e3c-8043-0e04803e5f16/images/icon_note.png)

Note

This process requires an Engagement admin account at the top-level account of a tenant enabled with these permissions.

- **Administration** | **General** | **Access**
- **Administration** | **Account** | **Update Account and Security Settings**

MFA requires that you add several new IP addresses to your allowlist. [Review this list](https://help.salesforce.com/s/articleView?id=mktg.mc_es_ip_addresses_for_inclusion.htm&release=264.0.0&type=5 "Add the Salesforce IP address to your allowlists so that your users can process login authentication requests. Allowing the entire set of IP addresses avoids unintended service disruptions caused by movement between primary and secondary instances.") for the correct values.

Before making MFA mandatory for your account, communicate the time and date of this change to your users. Include information about the benefits of MFA, the importance of adoption, and the verification method options in your announcement. This advance notice and guidance helps your users obtain and register their MFA verification methods. We recommend that users register multiple verification options to ensure that they maintain access to their account.

To require MFA:

1. Log in to Engagement.
2. Hover over your name, and click **Setup**.
3. Click **Security**, and select **Multi-Factor Authentication**.
4. Click **Edit**.
5. Select **Require Multi-Factor Authentication**.
6. Save your changes.
7. Log out.

When MFA is mandatory, all users in a tenant must register at least one verification method before they can access their account. If a user doesn't have a registered method, they're prompted to set one up the next time they log in. They use that verification method to prove their identity for each subsequent login. See [Configure MFA Verification for Marketing Cloud Engagement Logins](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_mfa_enable_account.htm&release=264.0.0&type=5 "Configure a multi-factor authentication (MFA) method to provide an additional layer of security for your Marketing Cloud Engagement account. MFA is required for all users and can’t be turned off. The first time you log in to your account, you must register an MFA verification method. On all subsequent logins, you must log in using MFA.") for more guidance.

#### See Also

- [How To Configure for Success: Multi-Factor Authentication | Marketing Cloud](https://www.youtube.com/watch?v=3yWQXuc-fOg)