How to Reset or Disable MFA (Multi-Factor Authentication) for Qlik Cloud Analytics

[Anonymous]

Multi-factor authentication (MFA) adds additional security for logging into Qlik Cloud Services. Qlik recommends enabling MFA on your Qlik account.

If the device used for MFA is being replaced, or if MFA needs to be disabled temporarily, this can be achieved in your My Qlik Portal.

Do not remove the authenticator app from your device before you remove Multi-factor Authentication.

1. Log in to My Qlik and navigate to your Password & Security settings.
   
   You can also access this by clicking on your profile picture, selecting Profile settings, and choosing Password & Security
   
   
2. Scroll to Multi-factor authentication and click Remove
   
   
   
3. Confirm by clicking Log out & remove 
   
   
   
   
4. Multi-factor authentication will be removed at the next login and can be set up again if needed. See How to Setup Multi-Factor Authentication (MFA) for Qlik Sense Business.

Unable to log in? Contact Qlik Support as the user who requires MFA to be reset or disabled. We will be unable to assist if a different user requests the reset.

[acardella]

hi @Sonja_Bauernfeind and @Jamie_Gregory 

it is possible to activate MFA to ALL tenant users once?
it also possible to DISABLE "reset/remove" button ? 

I don't want that each user can decide if the mfa auth is active or not.

This would be a TENANT admin right.

thanks for helping me

[Sonja_Bauernfeind]

Hello @acardella 

MFA cannot currently be enforced for QlikID users (different QlikIDs can be used on different tenants). If you require MFA to be mandatory, you can bring your own IdP with a Qlik Sense SaaS Enterprise subscription (not available for Business subscriptions).

In addition, we have an active suggestion gathering feedback currently which may interest you: Enforced MFA and/or Google SSO for Qlik Sense Business SaaS 

All the best,
Sonja 

[acardella]

In a time of growing concern about security risks, I think the ON/OFF on MFA should be at TENANT level, not at single user level.

however...

Is the BYOIDP request made when the tenant is activated?

We have a customer with QSEE with the specific request to activate MFA and this can be a good lever to migrate it to the cloud.

If I need to use an external IDP also in the cloud then I can configure onpremise authentication via SAML/OIDC and keep everything where it is now

thanks

[Sonja_Bauernfeind]

Hello @acardella 

I understand the requirement and would urge you to provide your feedback and vote on the idea that I linked above. We also have an internal product suggestion active, but the more feedback we can gather from our customers in the ideation section, the better.

If you are moving a customer from an Enterprise Solution (Qlik Sense Enterprise on Windows) over to the Cloud, using the Enterprise subscription is recommended to make use of its enterprise-level capabilities. Including giving you (and your customer) control over what IdP you wish to use: Identity providers.

All the best,
Sonja 

[acardella]

thanks Sonja.

i don't know why... but i'm unable to login at ideation.qlik.com.

there's some request to do to be enable ?

thanks

[Sonja_Bauernfeind]

Hello @acardella 

It should be enabled for everyone by default. If it gives you trouble, try this:

1. Go to Ideation
2. Select Browse and Suggest
3. Click the little Login help button next to Suggest Features
   
   
4. Click Learn more
   
   
   
   
5. Now click authenticate me
   
   

Hope this helps! 

[acardella]

thanks.

it was enough to connect to the home page and click "Now click authenticate me"

i did it

thanks

[Linda95]

Hi @Sonja_Bauernfeind Is there any way we can centrally reset the MFA? We have a user that got locked out of Qlik Cloud and also cannot find the recovery key anymore.

[Sonja_Bauernfeind]

Hello @Linda95 

A quick chat with Support would be required here. But I also recommend logging an idea for this to surface the need for an administrator managed reset functionality.

All the best,
Sonja