---
title: Using MFA for Mobile Application
slug: singleconnect-reference-guide-3-1-0/using-mfa-for-mobile-application
description: Learn how to enable multi-factor authentication (MFA) on Single Connect's Mobile Application by installing the Single Connect Mobile App and registering a token. Ensure that OTP is enabled for the user group and navigate to the System Config. Man in the A
docTags: 
createdAt: 2022-07-31T18:06:05.000Z
---

Single Connect’s built-in MFA can be used as a secondary layer of authentication for logging into the Mobile Application for its online features (Approval Management, Geo-Fencing, and Password Manager).


To enable MFA for Mobile Application:

:::hint{type="info"}
- Admin and user must install the Single Connect Mobile App and register a token to receive Offline Tokens with the mobile app. (You get the Offline Tokens from the Offline Token > Add > Register Token menu).
-
  OTP must be enabled for the user group that will be using MFA for Mobile Application connections. (See sections [Sending MFA QR Code to Users](docId\:rp1Jmk8eURGPhf9kk1Ptd), [Creating a Connection Between Single Connect and the Single Connect Mobile Application](docId\:KccA5BSNGQRWE6HGWriWQ), [Enabling One-Time Password (OTP)](docId:_sNgOzT0ejJo6neXHr8JQ))
:::

1. Navigate to **Administration **> **System Config. Man**.
2. Set the **mobile.application.otp.enabled **parameter as true.

After these settings are done and a login operation was started on the mobile application, the application will automatically look for a Registered Token in its Offline Tokens with the name that matched the tfa.otp.issuer parameter. If there are registered tokens with other names, then it will prompt for user to select a registered token. If the current six-digit value of the Offline Token (either the automatically

:::hint{type="info"}
The Mobile Application MFA functionality works only with the registered tokens to ensure that the offline tokens are only working in one application at a time.
:::