How to Enable or Disable MFA for Individual Staff Accounts

You can enable or disable Multi-Factor Authentication (MFA) for individual staff accounts in DecoNetwork. This is useful when onboarding new team members, assisting staff with setup, or making exceptions to the global MFA policy while keeping the rest of your account secure.

In this article

• Prerequisites
• Why manage MFA per staff account
• Step 1: Open the Staff Accounts page
• Step 2: Open the staff member’s profile
• Step 3: Enable or disable MFA for the account
• Step 4: Save your changes
• Best-Practice Tips
• Troubleshooting
• FAQs
• Additional Resources

Why manage MFA per staff account

• Onboard new team members gradually by enabling MFA once they are ready.
• Temporarily exempt staff who have lost access to their authenticator app.
• Make exceptions for shared or kiosk-style devices where MFA is not practical.
• Override the global MFA policy for specific high-risk or low-risk roles.

Step 1: Open the Staff Accounts page

1. Log into your DecoNetwork Website.

2. Browse to Admin → Account.

   

   

3. Select Staff Accounts.

   

   The Staff Accounts page is loaded.

   

   Click the image to enlarge.

   

Step 2: Open the staff member’s profile

1. Click the name of the staff member whose MFA settings you want to change.

2. In the staff account settings panel, locate the “Require multi-factor authentication when logging in” checkbox.

   
   • Tick the checkbox to require MFA for that individual account.
   • Untick the checkbox to disable MFA for that account.

Step 4: Save your changes

6. Click Save to apply your changes.

Best-Practice Tips

• Keep MFA enabled for staff with access to financial data, production, or system settings.
• Use per-account MFA disabling only as a temporary exception while resolving access issues.
• After helping a staff member recover access, re-enable MFA to maintain account security.
• Document any long-term exemptions so your team understands why those accounts differ from the global policy.

Troubleshooting

• The staff member is still being asked for MFA after I disabled it.
  Confirm that you clicked Save after changing the setting and ask the staff member to log out and log back in (or try a private/incognito browser window).
• The staff member is not prompted to set up MFA after I enabled it.
  Verify that the checkbox is ticked and saved. Ensure they are logging in with the same email address shown on the staff account.

FAQs

Does this setting affect other staff accounts?

No. The “Require multi-factor authentication when logging in” checkbox only affects the single staff account you are editing.

What happens if global MFA is turned off later?

If global MFA is turned off, users who had MFA required individually will no longer be forced to use MFA at login, unless global MFA is re-enabled.

Should I disable MFA permanently for some staff?

Where possible, keep MFA enabled for all users. Long-term exemptions should be limited to low-risk roles or shared kiosk devices and reviewed regularly.

Additional Resources

• How to Enable or Disable MFA for all Staff Accounts
• How Staff Log In With MFA for the First Time
• How to Reset MFA Setup for a Staff Account