---
title: "Secure administrator access with MFA Enforcement foradministrators"
slug: "secure-administrator-access-with-mfa-enforcement-foradministrators"
tags: ["Area - Release Notes", "Role - All users", "Type - Commercial", "Type - Residential", "Focus - Construction", "Focus - Service Replacement"]
updated: 2026-07-11T01:06:52Z
published: 2026-07-11T01:06:52Z
canonical: "help.servicetitan.com/secure-administrator-access-with-mfa-enforcement-foradministrators"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.servicetitan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Secure administrator access with MFA Enforcement foradministrators

This improvement enforces multi-factor authentication (MFA) for administrator roles who haven't yet enabled MFA to prevent account takeovers and protect sensitive data.

### What's changing with MFA Enforcement for Administrators?

Before, MFA was optional for administrators. That left accounts with elevated access exposed to greater risk if credentials were compromised. Now, if the *MFA Enforcement Policy* feature is set to Enforced for Admins, all administrators must have an MFA factor setup: SMS or TOTP. If the administrator does not have a MFA factor setup, they will be prompted to set up TOTP.

### Before and After

#### Before (Current)

1. An administrator signs in with only a username and password.
2. MFA is optional and not required for high-access roles.
3. A security breach using stolen credentials could allow access to admin functions.

**Impact:** Administrator accounts are at higher risk of unauthorized access.

[**Try the current workflow in your account.**](https://go.servicetitan.com/#/Settings/employees/Edit/92544048)

#### After

1. Administrator logs in. If MFA is already configured, the administrator is directed to the dashboard.
2. If MFA is not configured, the administrator follows the TOTP MFA enrollment process.
3. MFA setup is mandatory and enforced as part of the standard login workflow.

**Impact:** Administrator accounts are secured against credential-based takeovers.

**Test the changes in the NEXT environment.**

### Who uses this feature

- All business types
- Default Administrators: Doesn't apply to custom roles named Administrators.
- Region availability: All regions

### How it works for your industry

A Branch Operations Manager with an Administrator role in ServiceTitan is required to authenticate using TOTP MFA before gaining access.

### How to Prepare

1. Confirm which administrator accounts exist in your company account.
2. Identify any administrators not currently using SMS or TOTP MFA.
3. Train your operations to manage MFA onboarding steps.
4. Align internal security policies with the enforced MFA requirement.

### Resources

- [Multi-Factor Authentication (MFA)Enforcement for Administrators](/v1/docs/multi-factor-authentication-mfa-enforcement-for-administrators)
- [Enable Multi-Factor Authentication for Identity Services](/v1/docs/enable-multi-factor-authentication-for-identity-services)
- [Resolve and manage MFA errors](/v1/docs/resolve-and-manage-mfa-errors-1)
- [Set up MFA with Google or Microsoft Authenticator](/v1/docs/authenticators)
- [MFA FAQ](/v1/docs/settings-1)
- Enroll in the [Enable Multi-Factor Authentication (MFA)](https://servicetitan.docebosaas.com/learn/courses/913/enable-multi-factor-authentication-mfa) Academy course

Targeted text message campaigns sent to customer segments through Marketing Pro.

**What it does:** Reaches customers on the highest-open-rate channel (SMS) with time-sensitive promotions, reminders, and service offers.

**Also called:** Text marketing, SMS marketing

**Tags:** Marketing Pro

[See the full glossary →](https://help.servicetitan.com/docs/glossary-overview)

**a.k.a.** Text Campaigns