June 2026
Release specific details for June 2026
Authentication
Medallia Ideas now supports multifactor authentication (MFA) for password sign-in. MFA will be enabled across Ideas communities on a phased schedule beginning in July 2026. For the date that applies to your community, or for more information, contact your Medallia account representative or Medallia Support. Users set up and use an MFA authenticator app on a camera-enabled device, enrolling via a QR code at sign-in. Administrators can reset a user's MFA enrollment to require them to set up their authenticator app again. These steps apply once MFA is enabled for your community. Until then, users continue to sign in with a password only.
For user instructions, see Sign in with a password. For administrator instructions, see Reset MFA for an account.
- Why is Medallia requiring this now?
- Medallia constantly evaluates its policies in light of a changing security landscape and industry best practices. We strongly believe that this is the right move to protect our clients' businesses most fully.
- Which Medallia products does this MFA policy apply to?
- Medallia is implementing this policy across all our products. We encourage clients to take the opportunity to review their practices with those other products.
- What is Multifactor Authentication (MFA)?
- Multifactor authentication (MFA) requires users to verify access to Ideas with both a password and an out-of-band passcode. This helps prevent unauthorized access even if a password is compromised. Ideas provides MFA for users who sign in to Ideas directly with an email and password; MFA applies only to non-SSO-authenticated users. (Clients may implement MFA through their own SSO mechanisms, but this is out of scope for Ideas MFA support.) Ideas supports authenticator apps via industry-standard QR code flows.
- What do I need to do to implement MFA on my program?
- No configuration is required. MFA will be enabled automatically for all roles and users on your community. For details on timing, please contact your Medallia account representative or Medallia Support.
- Can I get an exception to this policy?
Medallia treats your data with the utmost care and protection, and the use of these industry-standard technologies is critical in ensuring we continue to earn your trust. We recognize that some clients may have further questions or concerns, and we would be happy to discuss these with you in more depth. Please contact Medallia Support via help.medallia.com if you wish to engage our Global Security & Compliance (GSC) team for a discussion on this topic.
