Choose MFA types - Amazon IAM Identity Center
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Choose MFA types

Use the following procedure to choose the device types your users can authenticate with when prompted for MFA in the Amazon Web Services access portal.

To configure MFA types for your users

  1. Open the IAM Identity Center console.

  2. In the left navigation pane, choose Settings.

  3. On the Settings page, choose the Authentication tab.

  4. In the Multi-factor authentication section, choose Configure.

  5. On the Configure multi-factor authentication page, under Users can authenticate with these MFA types choose one of the following MFA types based on your business needs. For more information, see Available MFA types for IAM Identity Center.

    • FIDO2 authenticators, including built-in authenticators and security keys

    • Virtual authenticator apps

  6. Choose Save changes.