At N-able, we believe that strong security should be simple, consistent, and built into every experience.
To strengthen account security, we’re making Multi-Factor Authentication (MFA) mandatory for all users who sign in using N-able Login (formerly MSP SSO).
Why MFA Matters
MFA is one of the most effective ways to prevent unauthorised access. It adds a critical layer of protection by requiring users to verify their identity through multiple methods. This helps reduce the risk of phishing, credential theft, and other attacks targeting login credentials
We know MFA can sometimes feel like a hurdle, especially when recovery codes are lost or admins aren’t sure how to help. That’s why we’re improving the experience.
What’s Changing?
MFA will be required for all users accessing N-able products via N-able Single Sign-On (N-able Login). Whether you’re a new user or a long-time customer, you’ll be prompted to set up MFA if it’s not already configured.
This change will apply to:
- All products using N-able Login:any user logging in with N-able Login to any N-able product.
- New and existing users: MFA setup will now be part of the login journey.
- Admins: Can still reset MFA for users, but recovery codes may be required.
If your organisation uses an external identity provider (IDP) like Microsoft Entra ID, MFA will be validated via token claims (no duplicate prompts!)
Supported MFA methods
N-Able Login supports Time-Based One-Time Password (TOTP) authentication via industry-standard authenticator apps, including:
- Microsoft Authenticator
- Google Authenticator
- Authy
- Duo Mobile (TOTP mode)
This method generates a rotating 6-digit code that users must enter after their password to complete the login process.
What you need to do next
- Check your MFA status: If you haven’t set it up, you’ll be prompted at next login.
- Review admin capabilities: Make sure your team knows how to reset MFA using recovery codes or admin tools.
- Configure Entra ID properly: Ensure MFA is enforced for the N-able app in your Azure settings.
This enforcement is part of a broader roadmap in which we’re committed to making security seamless and scalable—whether you’re managing a few endpoints or thousands
You must be logged in to post a comment.