---
title: "Multifactor Authentication"
slug: "multi-factor-authentication-v6-7"
description: "Enhance security with AppGate ZTNA's Multi-Factor Authentication, requiring identity confirmation for app access through OTPs and FIDO tokens."
updated: 2026-06-11T20:09:51Z
published: 2026-06-11T20:09:51Z
canonical: "support.appgate.com/multi-factor-authentication-v6-7"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Multifactor Authentication

AppGate ZTNA allows your security team to configure policies requiring you to confirm your identity using multifactor authentication (MFA) at sign-in. This may apply when you access certain applications or at specific times.

Unlike a static password that can be guessed or stolen, MFA requires separate pieces of evidence to verify your identity. The first piece of evidence is knowledge (something you know, such as your static login password). The second piece is possession (something you have, such as your phone). An OTP, for example, can come from a smartphone app, an SMS message, or a hardware token.

If you do not want to complete MFA now, close the window. It reopens when needed.

## **Using an Authenticator App**

To verify your identity with an authenticator app:

![](https://cdn.us.document360.io/e7482ce5-acfa-4c3b-b76c-b6c32472644a/Images/Documentation/enter_otp.png?sv=2026-02-06&spr=https&st=2026-10-26T23%3A24%3A07Z&se=2026-10-27T00%3A24%3A07Z&sr=c&sp=r&sig=T8iM3ZmUBMFPDGgUphCIups2DmUUx6onKuvWLpQZxhA%3D)

1. Open the authenticator app on your mobile device. The app generates a six-digit OTP automatically.
2. Type the six-digit OTP into the popup window (no spaces). The code is valid for 90 seconds. If you enter it incorrectly or the code expires, type in the next code that appears.
3. Click **Submit** or **Connect** to continue.

If this the first time you have used the authenticator app, you must complete a short setup process. See [Using the Built in OTP](/v1/docs/using-the-built-in-otp-v6-7).

## **Using an alternative OTP solution such as a token**

1. Generate or locate the next OTP.
2. Type the OTP into the popup window (no spaces).
3. Click **Submit** or **Connect** to continue.

## **Using FIDO tokens**

![](https://cdn.us.document360.io/e7482ce5-acfa-4c3b-b76c-b6c32472644a/Images/Documentation/alternative_action.png?sv=2026-02-06&spr=https&st=2026-10-26T23%3A24%3A07Z&se=2026-10-27T00%3A24%3A07Z&sr=c&sp=r&sig=T8iM3ZmUBMFPDGgUphCIups2DmUUx6onKuvWLpQZxhA%3D)

Follow the instructions for your FIDO hardware. Insert the FIDO key and touch it while it is flashing. After a short delay, you can access the resource.