---
title: Using MFA for Mobile Application
slug: singleconnect-reference-guide-3-2-0/using-mfa-for-mobile-application
description: Learn how to enable Multi-Factor Authentication (MFA) for Single Connect's Mobile Application. Discover the steps to install and register a token, enable MFA for user groups, and configure the system settings for MFA functionality. Ensure the security of 
docTags: 
createdAt: 2022-07-31T18:06:05.000Z
---

Single Connect’s built-in MFA can be used as a secondary layer of authentication for logging into the Mobile Application for its online features (Approval Management, Geo-Fencing, and Password Manager).


To enable MFA for Mobile Applications:

:::hint{type="info"}
- Admin and user must install the Single Connect Mobile App and register a token to receive Offline Tokens with the mobile app. (You get the Offline Tokens from the Offline Token > Add > Register Token menu).
- MFA must be enabled for the user group that will be using MFA for Mobile Application connections. (See sections [Sending MFA QR Code to Users](docId\:LA6-KhoWbPBZuXApg7kq8), [Creating a Connection Between Single Connect and the Single Connect Mobile Application](docId\:j4CmZgY16iYNhWMBA9Q88), [Enabling Multi Factor Authentication (MFA)](docId\:xFA9dJxvvRWULaTASMc_3) 
:::

1. Navigate to **Administration **> **System Config. Man**.
2. Set the **mobile.application.otp.enabled **parameter as true.

After these settings are done and a login operation was started on the mobile application, the application will automatically look for a Registered Token in its Offline Tokens with the name that matched the tfa.otp.issuer parameter. If there are registered tokens with other names, then it will prompt for user to select a registered token. If the current six-digit value of the Offline Token (either the automatically)

:::hint{type="info"}
The Mobile Application MFA functionality works only with the registered tokens to ensure that the offline tokens are only working in one application at a time.
:::