All 18F systems requiring authentication must use multiple factors. Examples of multi-factor authentication (MFA) include, but are not limited to:
- cloud.gov identity provider
- GSA SecureAuth - only an option when your users have GSA ENT accounts
- OMB Max - requires an Inter-Agency Agreement
- Login.gov - requires an Memorandum of Understanding for new agencies
Systems in the pre-assessment phase do not require MFA.