Multi-factor authentication (MFA) is a second method of authentication to verify your identity when you log in to Anaplan. If MFA is enabled for your tenant, all users must use an authenticator app when they log in to Anaplan through basic authentication.

Before you start

Before users can log in with MFA, a tenant security administrator must enable MFA from the Administration console. 

After ‌a tenant security administrator enables MFA, users that log in with basic authentication (email and password) will be prompted on the login screen to download an authenticator app.

Authenticator apps for MFA

Anaplan supports these authenticator apps:

  • Google Authenticator
  • Microsoft Authenticator
  • Auth0 Guardian
  • Twilio Authy

Set up an authenticator app for login

A tenant security administrator must enable MFA before you use this setup.

To set up an authenticator app with your Anaplan account:

  1. Use a mobile device to download one of the supported authenticator apps.
  2. Use a computer to log in to Anaplan with your email address and password.

Note: We recommend you use a computer to log in to Anaplan. When you set up an authenticator app with your Anaplan account, the login screen displays a QR code during the setup. You will need a mobile device to scan the QR code on your computer.

  1. On the Anaplan login screen, select which authenticator app you downloaded.
  2. Follow the instructions that display on the Anaplan login screen and on your authenticator app to finish the setup.

Login with MFA steps

To complete the login with basic authentication, you either:

  • Receive a push notification in your authenticator app.
  • Obtain a code from you authenticator app, which you must enter in the login screen.

Tenant settings

Note that for all tenants you can access, the MFA prompt status is based on your default tenant settings:

  • If MFA is enabled on your default tenant, you are always prompted to log in with MFA.
    You will be prompted to log in with MFA, even if MFA is disabled on the tenant you're trying to access.
  • If MFA is disabled on your default tenant, you'll never be prompted to log in with MFA.
    You won't be prompted to log in with MFA, even if MFA is enabled on the tenant you're trying to access.