Policies: Single sign-on (SSO) and Multi-factor authentication (MFA)

Details of the SSO and MFA requirement

Important: The requirements listed in this article take effect in May 2026. We will email all clients when the requirements are in place.

Agent Connect requires either multi-factor authentication (MFA) via email or single sign-on (SSO) access for all users. This requirement helps to ensure that only authorized users are able to access your organization's data.

To ensure maximum security of your data, no exceptions can be made to the SSO/MFA policy for any user or role. To support this security posture, user profiles must contain an official company email address (personal email addresses may not be used). This helps to ensure that MFA codes are only sent through your organization's email infrastructure.

Note: Users who authenticate via SSO are not required to use MFA, since they do not authenticate directly into Agent Connect.