What is multi-factor authentication (MFA)?
MFA stands for multi-factor authentication. It requires two or more kinds of proof to sign in: something you know (a password), something you have (a phone or security key), or something you are (a fingerprint). A stolen password alone is then not enough to get in.
What the buyer is really asking
Buyers want to know where MFA is enforced for your staff (email, cloud consoles, source control) and whether their users can turn it on in your product. Say "required" only if it is required, not just available.
Other ways buyers ask it
Every one of these wants the same answer:
- “Do you enforce MFA for employees?”
- “Is MFA required for access to production?”
- “Does your application support MFA for our users?”
- “Describe your multi-factor authentication implementation.”
Evidence to have ready
- Identity provider settings showing MFA enforcement
- Cloud and source control organization settings requiring MFA
- Product documentation for end-user MFA
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.