topic "Your company requires multifactor authentication"? in General Topics

"Your company requires multifactor authentication"?

kindzma — Wed, 05 Jul 2023 20:42:36 GMT

Just registered (created an account) on this community and was greeted with "Your company requires multifactor authentication", emphasis on "your company":

By "you company", does it mean Palo Alto, or some other company?

Thanks!

Re: "Your company requires multifactor authentication"?

aleksandar.astardzhiev — Thu, 06 Jul 2023 08:11:03 GMT

Hi @kindzma ,

I would say this is probably unintentional mistake by using old "template".

Long ago MFA for Customer Support Portal (CSP) was optional and every company had the option to choose if it should require users to use MFA or not.

However Palo Alto decided to made MFA mandatory for all CSP accounts - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClN9CAK

I cannot find any resource, but I remember there was some link (or was an email) that explained that MFA is now mandatory for all and you don't have option to create account without.

Back to your question...I would describe it as old template when MFA was optionally enabled by your company, but actually now it is enforeced by Palo Alto.

Re: "Your company requires multifactor authentication"?

kindzma — Thu, 06 Jul 2023 15:28:13 GMT

Thanks Aleksandar!

(Mine isn't a CSP account though - just a community account using a personal email address. There was an option to create a CSP account at the sign up stage, or purely a community one, and I chose the latter.)

P.S. + this MFA implementation seems to be a pain: asks for a code every time I login despite allowing all their cookies.

Re: "Your company requires multifactor authentication"?

aleksandar.astardzhiev — Thu, 06 Jul 2023 17:33:35 GMT

Hey @kindzma ,

All PAN portals are using some kind of SSO, so you are using same account for accessing LiveCommunity, Beacon, CSP, Hub and etc.

So above applies for community account as well, you just don't have access to CSP.

You do need to provide MFA once you login, but cookies should keep you log in. I just tested to close my browser and re-open it and I was still logged in, so your issue should be with something else.