---
title: Using MFA for Mobile Application
slug: reference-guide-3-0-0/using-mfa-for-mobile-application
description: Increase the security of your Single Connect Mobile App with built-in Multi-Factor Authentication (MFA). Enable MFA by installing the app, registering a token, and enabling OTP for user groups. This feature ensures offline tokens can only be used with one
docTags: 
createdAt: 2022-07-31T18:06:05.000Z
---

Single Connect’s built-in MFA can be used as a secondary layer of authentication for logging into the Mobile Application for its online features (Approval Management, Geo-Fencing, and Password Manager).


To enable MFA for Mobile Application:

:::hint{type="info"}
- Admin and user must install the Single Connect Mobile App and register a token to receive Offline Tokens with the mobile app. (You get the Offline Tokens from the Offline Token > Add > Register Token menu).
-
  OTP must be enabled for the user group that will be using MFA for Mobile Application connections.
:::

1. Navigate to **Administration **> **System Config. Man**.
2. Set the “**mobile.application.otp.enabled**” parameter as true.

After these settings are done and a login operation was started on the mobile application, the application will automatically look for a Registered Token in its Offline Tokens with the name that matched the tfa.otp.issuer parameter. If there are registered tokens with other names, then it will prompt for user to select a registered token. If the current six-digit value of the Offline Token (either the automatically.

:::hint{type="info"}
The Mobile Application MFA the functionality works only with the registered tokens to ensure that the offline tokens are only working in one application at a time.
:::