Authentication Options
If "Enable authentication policy choices" is checked, then it means that if an authenticating user, at authentication time, matches against multiple authentication policies, they will be given the choice to try a different policy if for some reason they cannot meet the requirements of one of their policies.
Without this option checked, an authenticating user will only be given the opportunity to attempt to authenticate to the first policy they match, going down the list in prioritized order. This menu provides administrators the option to enable this for users, as well as to modify four different ID elements for a user if needed.
TOTP Keys
Social IDs
Pictograph Choices
FIDO device registrations
 |
Clicking the Delete button opens a window to search users by first name, last name, or email address.
 |