> For the complete documentation index, see [llms.txt](https://docs.flosum.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.flosum.com/global-settings/security/mfa-devices/adding-an-mfa-device.md).

# Adding an MFA Device

{% hint style="success" %}

#### Required User Credentials

\[**Flosum User**] - Any Role
{% endhint %}

## ![](https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FSxcnKlaJKPzDqONWoDNv%2FSummary2-Small-Icon.svg?alt=media\&token=5e3253d0-a069-4ba5-9c06-83c70bd0b21d)Overview

Enabling Multi-Factor Authentication (MFA) adds an extra layer of protection to your login credentials for Flosum Cloud Apps. MFA works by requiring two separate forms of verification: your password and a time-based one-time passcode (TOTP), thereby significantly reducing the risk of unauthorized access and strengthening your organization's overall security posture. Flosum supports TOTP-based MFA and is compatible with mobile authenticator apps such as Google Authenticator and Microsoft Authenticator.

This article provides step-by-step instructions for adding MFA to your individual user account when logging into Flosum Cloud applications. It's important to note that MFA setup is user-specific—each team member must configure it for their own account.

{% hint style="info" %}
The **Global Settings > MFA Devices** page displays and manages MFA settings for the currently logged-in user only. Each user can view and modify only their own MFA devices—they cannot access or configure other users’ MFA.

Admins can see whether MFA is enabled for each user account, but they cannot view or edit individual MFA devices.
{% endhint %}

## Adding an MFA Device

{% stepper %}
{% step %}

### Access Global Settings

1. From any **Flosum Cloud App**, click the **App Switcher** icon at the top of the left sidebar menu.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2Fgh5FcQCnErKAjJ7isiuB%2FGS-Access-01.png?alt=media&amp;token=ddf01506-f133-4e49-825a-76a2a237e3a8" alt="" width="563"><figcaption></figcaption></figure></div>
2. Click **Global Settings**.&#x20;

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2Fx5vntzgpLuT50fMTzwT9%2FGS-Access-02.png?alt=media&amp;token=f67a125f-5087-47c2-9bc6-9393c3d2b7a5" alt="" width="563"><figcaption></figcaption></figure></div>
3. The **Global Settings** app will open in a new tab.

{% hint style="info" %}
Global Settings can also be accessed by logging in directly via the Flosum Cloud Apps Login URL. See the following article for login instructions.

* [Log In To Global Settings](/global-settings/getting-started/log-in-to-global-settings.md)
  {% endhint %}
  {% endstep %}

{% step %}

### Add Device

1. Click **MFA Devices** from the sidebar menu.
2. Click **Add**.&#x20;

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FVQKhuSkqXGqIKHjDyj0I%2FGSAddingAnMfaDevice-Add-01.png?alt=media&amp;token=f18a971a-0d4e-4b4b-82bc-947896276054" alt="" width="563"><figcaption></figcaption></figure></div>
3. Enter a name for the MFA device in the **Name** textbox.&#x20;

{% hint style="info" %}
Choose a descriptive name, as this will be the label shown in your authenticator app.
{% endhint %}

4. Click **Continue**.&#x20;

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FSNkHSdMu83hjTVvaggLi%2FGSAddingAnMfaDevice-Add-02.png?alt=media&amp;token=a48754f8-9a5d-4277-8b68-95ad2880417f" alt="" width="375"><figcaption></figcaption></figure></div>

{% endstep %}

{% step %}

### Confirm Authenticator App

1. Scan the QR code with your authenticator app.
2. Enter the code from your authenticator app in the **Code** textbox.
3. Click **Confirm**.&#x20;

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FF3T37OWF24ZICH5Wv0Ky%2FGSAddingAnMfaDevice-Add-03.png?alt=media&amp;token=ce36f468-3ec5-4f0c-98a8-b0fae6dd8896" alt="" width="375"><figcaption></figcaption></figure></div>
4. Once created, the new MFA device will be listed on the **MFA Devices** page.&#x20;

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2F8MXCCia1Qlwggm6dTO0d%2FGSAddingAnMfaDevice-Add-04.png?alt=media&amp;token=362dc4d6-50be-47df-a54e-f9dea7af6840" alt="" width="563"><figcaption></figcaption></figure></div>

{% hint style="info" %}
The next time you log in, you will be required to enter the code from your authenticator app.
{% endhint %}
{% endstep %}
{% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.flosum.com/global-settings/security/mfa-devices/adding-an-mfa-device.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
