[Account Settings] MFA Requirements by Account Role

[WenZhangBCSI]

Problem statement:

Students and staff are using Microsoft authentication to login Canvas and MFA has been enabled on Microsoft. Parents are using Canvas authentication, MAF needs to be enabled for all aparents. If we set MFA as "Required for all users", students and staff have to authenticate twice (Microsoft and Canvas). We don't want parents to choose if they want to set up MFA, so "Optional for all users" is not the right choice.

Proposed solution:

Enable MFA by account role might be a solution, so students and teachers don't need to authenticate twice.

User role(s):

admin