---
title: "Preliminary information an prerequisites for configuring MFA Providers"
slug: "mfa-providers-v6-6"
description: "Configure MFA Providers for use with user interactions in Conditions, MFA for Admins, or configuring the on-boarding mode for each Identity Provider (IdP)."
updated: 2026-02-11T18:48:58Z
published: 2026-02-11T18:49:00Z
canonical: "support.appgate.com/mfa-providers-v6-6"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MFA Providers

Multi-factor authentication can be used for controlling user access to network resources, administrator access to the Admin UI, and at sign-in. AppGate ZTNA provides a built-in Time-Based OTP Provider, a built-in FIDO2 provider, and supports external RADIUS MFA providers. Once MFA Providers have been configured, you can use them for creating user interactions in Conditions, MFA for Admins, or configuring the on-boarding mode for each Identity Provider (IdP).

## Before you start

You will need the following information before setting up an MFA provider:

- If using a RADIUS server, you will need the following:
  - Hostname/IP address
  - Port
  - Authentication protocol
  - Shared secret
  - Shared secret challenge

Background reading:

- See the [Multi-stage authorization - device trust](/v1/docs/multi-stage-authorization-v6-6#2-device-registration-trusted-device) section for information about on-boarding.
- For information about elevating levels of trust with user interactions, see the [Multi-stage authorization - elevating trust](/v1/docs/multi-stage-authorization-v6-6#5-conditions-claims-user-interactions-elevating-trust-level) section.
- For mandating multi-factor authentication for administrator access, see the [MFA for Admins](/v1/docs/mfa-for-admins-1) section.
- For more in-depth information about user interactions, see the [User interactions](/v1/docs/applying-access-controls-user-interactions-v6-6) page.
- To use AppGate ZTNA with different RADIUS options, see the [RADIUS Providers](/v1/docs/sys-config-multi-factor-authentication-v6-6#radius-providers) page.

Use the [MFA Providers](/v1/docs/configure-mfa-providers-v6-6) page to:

- Edit the default time-based OTP provider.
- Edit the default FIDO2 provider.
- Configure a new MFA provider and test connections to the provider.

> [!NOTE]
> **NOTE**:
> 
> Built-in providers cannot be deleted

When you are ready to add an MFA provider, see the [Configure MFA providers](/v1/docs/configure-mfa-providers-v6-6) section.