# Multi-factor authentication

**URL:** <https://community.sonatype.com/t/multi-factor-authentication/4214>\
**Category:** Sonatype Lifecycle & Firewall\
**Tags:** mfa\
**Created:** [May 14, 2020, 1:00pm UTC](https://community.sonatype.com/t/multi-factor-authentication/4214 "2020-05-14T13:00:11Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![joe.young.swqp](https://avatars.discourse-cdn.com/v4/letter/j/a9a28c/32.png) [@joe.young.swqp](https://community.sonatype.com/u/joe.young.swqp)\
**Post date:** [May 14, 2020, 1:00pm UTC](https://community.sonatype.com/t/multi-factor-authentication/4214/1 "2020-05-14T13:00:12Z")

</div>

Our enterprise direction is to add multi factor authentication, the first in scope are accounts with any admin privileges.

I see the addition of SAML has enabled SSO, but we are looking to add a token or token-pin layer to anyone in the admin role that authenticates through a service like LDAP or AD. I mention that because I think we need to keep a local, built in admin account with no MFA as a backup.