Multi-Factor Authentication (MFA) is a security method that requires users to identify themselves in multiple ways. Besides a password (something you know), this can be an SMS code, app notification, or biometric factor (something you have or are).

MFA reduces the likelihood of a malicious person gaining access with stolen login credentials. Even if a password is leaked, access remains blocked without the second factor.

Organisations often apply MFA to high-risk access points, such as remote logins or admin accounts. In many cloud environments, MFA is now a standard requirement.

Joinly supports MFA policies via Microsoft Entra and can enforce this per group, role, or application. This way, organisations can provide extra protection for sensitive data without sacrificing user convenience.

MFA is not only a technical requirement but also a compliance measure that is increasingly mandated by ISO-27001 and NIS2.

In short: MFA adds an extra layer that prevents one stolen password from granting access to everything.