Configure multi-factor authentication for privilege elevation when the agent cannot connect to the Platform
You can use this group policy to configure offline multi-factor authentication for users that are required to use multi-factor authentication to use elevated roles in the event that the agent cannot connect to the Centrify Identity Platform.
There are three configuration possibilities:
- Only users who have set up an offline MFA profile will be prompted for offline multi-factor authentication for privilege elevation. Users who have not set up an offine passcode will not be able to proceed.
- If an offline MFA profile is set up, prompt for offline MFA. Otherwise, allow the user to proceed and remind them to set up the offline MFA profile.
- Users can use elevated rights or roles when their machine is offline without multi-factor authentication.
If this policy is set to Disabled or Not Configured, the default is the first option.