Sign in
Catalog / Hands-on lab

Lab: Roll out MFA for a customer tenant

Your own Monosign v2026.10 server with a lab mail server and SMS gateway. Connect the channels, enable e-mail and SMS codes, set the order users see, enroll a user, sign in with MFA and lock the MFA state.

Monosign University Pass 50 minIntermediate DE · EN · ES · TR Partner Administrator

Version 4 · updated Nov 9, 2026What changed?

Hands-on lab
New
Sign in to start

Included with University Pass.

What you will learn

  • Take a tenant from password-only to enforced MFA, and prove each step works

Your lab environment

YOUR LAB SERVERYour browserAdmin, then aliceManagementChannels, authenticators, MFAsettings, DiagnoseLab mail serverMailpit, SMTP host mailpit,port 1025AccountEnrollment and sign-in withMFALab inboxSMS gateway (Web Service),shows mail and SMSLab usersalice with no factor yet, bob,hasanWeb terminalRead-only service logs andstatusConfigures
Your lab environment: Monosign sends codes through the lab mail server and SMS gateway, and the lab inbox shows you what arrived

Lab tasks

Each task is checked automatically against the real state of your lab environment.

  1. 1. Point the Mail channel at the lab mail server (host mailpit, port 1025, no TLS) and pass Diagnose
  2. 2. Point the SMS channel at the lab SMS gateway (Web Service provider) and pass Diagnose
  3. 3. Enable the Email authenticator with 8-character codes that contain letters and digits, and enable SMS
  4. 4. Make Email the first factor for users who have no default of their own
  5. 5. Require MFA tenant-wide, then sign in to the account portal as alice and complete the e-mail challenge
  6. 6. Stop users from switching their own MFA off, while they can still manage their factors