Multi-Factor Authentication (MFA)
What is Multi-Factor Authentication (MFA)?
An authentication method that requires users to provide two or more verification factors to gain access to a resource. MFA combines something you know (password), something you have (token), and something you are (biometric).
Terms that appear alongside multi-factor authentication (mfa)
Each of these is named in at least one of the same controls as multi-factor authentication (mfa). The number is how many controls name both.
- multi factor authentication 12 shared controls
- authentication 12 shared controls
- nist 9 shared controls
- access control 8 shared controls
- role based access control 7 shared controls
- privileged access management pam 7 shared controls
- privileged access management 7 shared controls
- access management 7 shared controls
Frameworks that govern multi-factor authentication (mfa)
What the standards actually require on multi-factor authentication (mfa)
Requirements naming multi-factor authentication (mfa) across 6 standards, quoted from the control text.
Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication confirms that each party to a communication (for example a person, device, service or application) really is who it claims to be, and gives assurance that no party is impersonating anothe...
X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →HL7 FHIR Authentication. SMART APP LAUNCH IMPLEMENTATION GUIDE v2.2.0 - foundational FHIR-based OAuth 2.0 / OAuth 2.1 + OpenID Connect framework + standardised app authorization.
HL7-FHIR-Auth-SMART-OAuth-OIDC-Backend · HL7 FHIR Authentication - SMART App Launch + OAuth 2.0 + OpenID Connect + Backend Services + Token Lifetime →ISMAP Identity and Access Management requires comprehensive IAM controls covering customer + CSP + administrative + service-to-service identities.
ISMAP-Identity-Access-MFA-Privileged-Federation-SSO-API-Tokens-CloudIAM-PIV-PASETO · ISMAP Identity and Access Management - Cloud IAM + Multi-Factor Authentication + Privileged Access + Federation/SSO + API Security + Access Tokens + My Number Card Integration + Government IAM →Kuwait NCF Protect function (Access). Access Control and Identity Management aligned with NIST SP 800-53 AC family + ISO 27001 A.9 + Zero Trust principles.
KNCF-Protect-Access-Control-IAM-Privileged-MFA-Zero-Trust-Identity-Lifecycle-IAG-PAM · Kuwait NCF Protect + Access Control + IAM + Privileged + MFA + Zero Trust + Identity Lifecycle →Implement NIST 800-53 AC Access Control family + IA Identification and Authentication family per MARS-E v2.0 catalog. NIST 800-63-3 Identity Assurance Level 2 (IAL2) + Authenticator Assurance Level 2 (AAL2) + Federation Assurance Level 2 (FAL2) for Exchange co...
MARS-E-Access-Control-Identity-Authentication-NIST-800-63-Identity-Assurance-Levels-MFA-AC-IA-Families · MARS-E Access Control + Identity + Authentication + NIST 800-63 + MFA + AC + IA Families →MFA required for any individual accessing the Covered Entity's information systems. Specifically required for remote access to information systems, remote access to third-party applications including cloud-based, and all privileged accounts other than service...
§500.12 · Multi-Factor Authentication →Questions people ask about multi-factor authentication (mfa)
What is Multi-Factor Authentication (MFA)?
Why is Multi-Factor Authentication (MFA) important for compliance?
Which compliance frameworks address Multi-Factor Authentication (MFA)?
Where can I learn more about Multi-Factor Authentication (MFA)?
See how Multi-Factor Authentication (MFA) applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.