Overview
Multi-Factor Authentication (MFA) adds an additional layer of security to your GoFormz account by requiring verification beyond your password. GoFormz supports two MFA methods:
Authenticator App (TOTP)
SMS text message
Users may enable one or both methods.
Admins can require MFA for the entire account or for specific users.
Note: If your Identity Provider (IdP) reports that MFA has already been satisfied when using SSO, GoFormz will not require additional verification.
Enrolling in MFA
Users can manage MFA from Profile → Multi-Factor Authentication.
Add a method
Select Configure for Authentication App or SMS.
Confirm that you want to continue.
A popup will open, where you will be asked to confirm your password and any existing MFA if a method has already been configured
After confirming your identity, you will be taken directly to the MFA configuration screen.
Complete the setup steps and enter the verification code to activate the method.
Remove a method
Select Remove next to the method you want to delete.
Confirm that you want to continue.
A popup will open, where you will be asked to confirm your password and enter the MFA before it can be removed
Click the Delete icon next to any MFA methods you want to remove
If MFA is required for your account, you can re-configure a method from this page.
Note: If MFA is required for your account, at least one MFA method must remain active. If both methods are deleted from the configuration page, you will be required to set it back up after your next login.
Switching methods
If both methods are enabled, you can choose which method to use at sign-in.
Managing MFA (Admins)
Admins can enforce MFA at the account level or manage MFA for individual users.
Require MFA for all users
Go to Account Settings → Security.
Enable Require MFA for all users and confirm.
When MFA is enforced for the entire account:
Users without MFA must enroll at their next login
Users cannot access GoFormz until enrollment is complete
User MFA status appears as “Configured” or “Not Configured” in Users & Groups
Users List shows MFA Status column
User-level MFA controls
Admins may require, allow, or remove MFA for an individual user unless account-wide enforcement is already active.
Use the Require MFA for this user toggle in the user profile
Bulk enforcement is available under Users → Bulk Actions, unless MFA is already required by the account
You may not change the user level requirement if Account-level requirement is set
Reset MFA for a user
Reset MFA when a user:
Loses access to their MFA device
Needs to start over
Reports MFA issues
Resetting MFA:
Removes all MFA methods for the user
Requires the user to re-enroll at next login (if MFA is required)
Sends the user an email notification confirming the reset
To reset MFA:
Go to Users & Groups
Open the user profile
Select Reset MFA for this user and confirm
Note: Resetting MFA does not remove any account-level or user-level MFA requirements.