Does SSO support multi-factor authentication from my identity provider?

Yes. When you enable SSO, authentication is handled entirely by your chosen identity provider (IdP). This means any security measures you configure at the IdP level, such as multi-factor authentication (MFA), conditional access policies, or device trust rules, are fully enforced during login.

Cognito Forms does not override or duplicate authentication with your IdP. If you are not using SSO, Two Factor Authentication (2FA) is available through Cognito Forms.