The MFA for Admins page allows you to enable multifactor authentication for access to the admin UI. This is strongly recommended.
For other recommendations about how to improve the security of your AppGate ZTNA system, please refer to System security - best practice.
Complete the following fields to configure MFA for admins:
Enable MFA for access to the Admin UI. Check this box if you want to force the use of MFA.
Multi-Factor Authentication Provider. MFA provider to be used for admin UI access. You will need to have already configured the MFA provider in MFA Providers.
NOTE
The Default FIDO2 provider does not support MFA for admin UI access.
Exempted Users. When REST calls are made to the Controller it is not possible to use MFA. You can exclude your API users from this requirement. There is more information about using REST calls in the REST API section.