config properties mfa properties device_trust_policy

Version

v1.3.2

device_trust_policy Type

string

device_trust_policy Constraints

enum: the value of this property must be equal to one of the following values:

Value	Explanation
"always"	Devices are trusted without user consent until the trust expires, so MFA is skipped during subsequent logins.
"prompt"	The user can choose to trust the current device to skip MFA for subsequent logins.
"never"	Devices are considered untrusted, so MFA is required for each login.

device_trust_policy Default Value

The default value is:

"prompt"