foreign tication if not why not because multi-factor authentication dramatically increases the security of your servicenow instances and prevents the majority of security attacks maybe it's the inconvenience of getting your users to use an external authenticator application well what if I told you that there is an even quicker and easier way to get your users to use multi-factor authentication or MFA there is a feature in servicenow that allows users to log in with their fingerprints and faces it's called Web authentication and it was introduced in the ROM release what is multi-factor authentication well it's the authentication using a combination of two or more methods such as something that you know such as a password or a pin something that you have such as a security card or a an authenticator app and something that you are such as a fingerprint or a face ID or some other biometric identification so let's take a look at how easy it is to set this up and get your users using multi-factor Authentication the first thing you will need are a couple of plugins the first is multi-factor authentication and the second is web authentication the MFA plugin may already be installed but you'll need to install the web authentication plugin as I've done here okay so once you have those two plugins installed you can come to the properties for multi-factor Authentication okay so I'm just going to go straight to the properties page and enable multi-factor authentication that's all I have to do if you scroll down a little bit further you'll see here that the property for enabling web authentication is already active as soon as we activated that plug-in that property is set to active by default okay so I'll go ahead and save that now as an administrator you have the capacity to enable multi-factor authentication or require it for any user at all we won't go into multi-factor criteria here and the MFA context but there are ways as I said for an administrator to make it mandatory to log in using multi-factor authentication for this little demonstration I'm just going to enable this for myself as a system administrator so I'm going to come to my user profile here and once you have MFA activated you'll see that there is a link here in the profile called multi-factor authentication so I'll open up that and I'll go ahead and click setup authenticator app okay I'll get a QR code here so I need to scan that with my device right now for this demonstration I'm going to use Google Authenticator but you can also use many other authenticator apps out there just check the servicenow documentation for what's supported so I will open up that and scan this QR code okay so now I've got my six digit code that's been registered with my application with my instance rather I'll put the code in and pair the device okay and that's been set up now okay so we can go ahead and test it so if I come in here to log out and I'll log back in okay so now I get the requirement that I need to enter in that code once more so I will do that one eight six two seven seven okay now what I could also do right here is to set up biometric authentication but I won't do it right now I'll click on login so in order to log in with a fingerprint Touch ID on the MacBook for example or your face such as face ID on an Apple device you need to have multi-factor authentication enabled and you need to have the authenticator app enabled as well that's a requirement actually you can't just use a fingerprint or a face ID because not all browsers operating systems devices will support this so the authenticator app is kind of like the Baseline if you like the backup and if you want to use a fingerprint or a face ID then you can go ahead and do that so now that I've logged back in again I'm going to go back to my user profile here and enable Touch ID as well so I'll go to back to multi-factor Authentication you can see we already registered the authenticator app and now I've got the option here to enable a biometric authenticator or a Hardware security key so I'll go ahead and select registered biometric Authenticator I'll give this a nickname I'll just say this is my MacBook and register and then I'll get a pop-up here continue to put in my fingerprints so I'll do that now and that's it okay my device is now registered with my servicenow instance so again we can come here to log out log back in now rather than entering in the six digit code from my authenticator app I can just select login using alternative method and my prompt comes up for a password reader I select well enter in my fingerprint that's it okay don't have to worry about a phone or entering in six digits a lot quicker and easier I can just use the fingerprint reader on my own laptop so that's how easy it is ladies and gentlemen to set up multi-factor authentication using your fingerprint reader on your laptop we can also try now to set up multi-factor authentication using my phone and then using face ID on my iPhone all right everyone I'm now trying to log into the same instance with the admin user on my mobile device I'm using servicenow agent and I'm going to just tap login okay I'm going to have to enter the six digit code here to set this up so I'll go back to my authenticator app and then I'll go ahead and put that code in and I'm going to select this last option here to set up biometric authentication for this device login okay now I can register the device continue face ID is registered with my instance now and now I'm logged in actually don't have any apps installed on my instance any mobile apps for the instance so this is why the page is blank but I'm logged in now so now whenever I want to log into the servicenow agent app I can just use face ID on my phone as my form of multi-factor Authentication and that's it that's all you need to do to set up multi-factor authentication using biometric data from your users whether it's a fingerprint a face or even you can use a security card as well okay um if you want more information check out the documentation site from servicenow docs.servicenow.com there's a few system properties and a few other things you can do there but I hope you've enjoyed this video and we'll see you next time bye for now [Music]