Important: Do not enable MFA for OS X if the system is already using or has configured another multifactor service or authentication plugin. Doing so could cause adverse results; up to and including being unable to access the system.
Note: MFA only affects the OS login screen. Filevault decryption, screen saver, lock screen, etc.. are not affected by this setting.
- Navigate to the Systems list in the Administrator Portal
- Select the system details then choose to enable Multifactor Authentication
- Users must obtain an application to generate TOTP tokens and validate their TOTP key. Once done, users will see a modified login window that will prompt for a token: