Genesys Cloud enables administrators to enforce multi-factor authentication (MFA) organization-wide through the Authentication tab in Organization Settings to enhance security and reduce fraud risk during user login. When activated, the "Require Multi-Factor Authentication" toggle mandates that all users enter a verification code from their phone or device in addition to their password. Required administrative permissions include View and Edit access for Single Sign-On Providers and Admin access for the Organization. Administrators can toggle MFA ON to mandate it for all users or OFF to make it optional; however, users who have already configured MFA remain subject to the requirement regardless of the toggle setting. The configuration process involves navigating to Menu > Account > Organization Settings, selecting the Authentication tab, toggling the checkbox, and saving changes. Once enabled, all users must configure MFA on their first login. Administrators should possess permissions to reset MFA devices to support users as needed. MFA supports verification codes from phones or devices as well as passkeys for authentication.