====Enhanced Multi-Factor Authentication====
Moved multi-factor authentication (MFA) settings from the user roles to '''Global Settings''' > '''Security''' tab > '''Password and Activation Policies'''. In this new location, you can enable MFA and assign MFA options to some or all roles from a single central location. Additionally, there is also a new toggle called '''Enable Trusted Device'''. If you enable trusted devices, you can set the time period in which a person who has authenticated into the system can bypass entering the MFA verification code. To learn more on MFA setup, read [[Multi-Factor Authentication|our article on multi-factor authentication]]. '''Note''': in an effort to enhance everyone’s security we will by default enable multifactor authentication for all roles in 2023.
<!-- Ticket ID139210 - MFA remember my computer (trusted device) functionality. -->
[[File:2022-11-ticket-139210-1.png|thumb|none|800px|Multi-factor authentication (MFA) settings have moved and are defined globally instead of on the role.]]