All 18F systems requiring authentication must use multiple factors. Examples of multi-factor authentication (MFA) include, but are not limited to:
- cloud.gov identity provider
- GSA SecureAuth - only an option when your users have GSA ENT accounts
- OMB Max - requires an Inter-Agency Agreement
Systems in the pre-assessment phase do not require MFA.