Check whether MFA is required
Is MFA required here?
Ask which MFA policy your organisation runs. Then read it yourself, and know what changes if you turn it up.
What you get: the organisation’s MFA policy mode in one word, and what each mode means for the people who sign in.
Ask Quox
Section titled “Ask Quox”Ask in plain words:
What is my MFA policy mode?
▤ AOCL │ L1 identity complete · allowed · 1ms
▤ AOCL │ L3 policy gate complete · proceed · 9ms
◐ QUOX │ cli ✔ QUOX │ cli │ 0 exit code, 7483 duration ms · 11.1s
⛓ AEE │ envelope opened · ops.tool · quox_cli ok
⛓ AEE │ envelope opened · stream_success
Your org's MFA policy mode is optional. I read that live just now. Users can enrol in MFA, but nothing forces them to. The other modes are disabled and required [K1]. If you switch to required , enrol your users first and change the setting second. Anyone without MFA enrolled gets blocked at login once it's on [K2]. Sources: [K1] Install dependencies; [K2] STATUS_AND_LIMITS, Auth + Enterprise Enforcement
24.2s · 1 tool · 0 approvals
quox.✔ Machine verified against the CLI on 28 Oct 2026 · test report mvrj7v
What just happened
Section titled “What just happened”Quox read the live MFA policy for your organisation and changed nothing. The policy has three modes: disabled, optional and required. Under optional people can enrol in MFA but nothing makes them.
Do it yourself
Section titled “Do it yourself”1. Read the policy
Section titled “1. Read the policy”quox security mfa getOrg MFA Policy────────────────────────mode optional2. Change it, in the right order
Section titled “2. Change it, in the right order”quox security mfa set <mode> takes disabled, optional or required. That one writes, so run it on purpose. Before you set required, make sure your people have enrolled: anyone without MFA enrolled is blocked at sign in once it is on.