We have always encouraged MFA as an extra security measure, but we are now taking a step further by enforcing this extra layer of security for the Pulseway PSA. MFA authentication is an important best practice to secure user accounts. It substantially reduces the risk of user account breaches in the event your credentials are compromised.
​
Important Notes:
​
1. The first time a new user authenticates via Pulseway PSA credentials (or via SSO and is redirected back to PSA), they'll be prompted to set up MFA on their user account. This is the current workflow for all accounts that have chosen to enforce MFA on their PSA account.
​
2. Subsequent to this initial log-in, navigating to a PSA account configured with SSO will still redirect to the SSO provider for authentication, and then back to PSA once successful. No extra steps will be required, and the PSA MFA will not be requested.
​
3. If there are any integrations using a normal user without 2FA and not an API user, please note they will stop functioning till this is addressed.
​
We hope that provides some clarity. Please let us know if we can assist further.