Configure multi-factor authentication for privilege elevation when the agent cannot connect to the Platform

You can use this group policy to configure offline multi-factor authentication for users that are required to use multi-factor authentication to use elevated roles in the event that the agent cannot connect to the Centrify Identity Platform.

There are three configuration possibilities:

  • Only users who have set up an offline MFA profile will be prompted for offline multi-factor authentication for privilege elevation. Users who have not set up an offine passcode will not be able to proceed.
  • If an offline MFA profile is set up, prompt for offline MFA. Otherwise, allow the user to proceed and remind them to set up the offline MFA profile.
  • Users can use elevated rights or roles when their machine is offline without multi-factor authentication.

If this policy is set to Disabled or Not Configured, the default is the first option.