MFA requests now reach you through a system notification on Windows, macOS and Linux. Approve or deny the request from the notification itself, instead of having to open the XFA tray menu to find it.
Three new dashboard surfaces this week, and a new device check.
The new Getting Started page helps you get more out of XFA. It lays out four tracked steps, from discovering every device to staying secure and compliant, so you always know what to set up next.
The Devices page now opens with a card for Discovery, Awareness and Enforcement, so you can see at a glance where your organization stands. Each card says whether that pillar is running or waiting on you, with the number behind it: devices discovered, alerts sent, successful sign ins. See the Devices overview
Trends are now a single card: four tiles act as tabs above one chart, with the period, the operating system filter and the chart type on the card instead of in a fullscreen modal. Custom date ranges are supported, and the BETA labels are gone.
The device detail view now reports whether a device allows unattended remote access, and explains what the check looks for. You can act on it in your policy; XFA does not change the setting on the device. See your device policy
Reconnect button, and counts towards the Discovery badge.This week strengthens what XFA checks on mobile devices at sign-in, and makes the dashboard feel lighter and more responsive.
The checks that flag a jailbroken, rooted or developer-mode device, or one that was just rebooted, already ran in the XFA app and showed in your dashboard. They now also reach the access decision at sign-in for mobile devices, so a risky mobile device is warned or blocked at login per your policy, the same way it already is on desktop. Nothing new is installed: the mobile app simply reports these signals when it verifies the device at sign-in. See your device policy
Watch demo action that opens a short guided tour without leaving the dashboard.OK in the app while sign-in is actually being blocked.Add an extra layer of protection to your organization with Time-based One-Time Password (TOTP) authentication, a new MFA method alongside Built-in passkey.
Administrators can enable TOTP from the Enforcement page in the XFA dashboard. Navigate to Enforcement → Manage on your integration, then enable TOTP under Multi-Factor Authentication.
We've added comprehensive documentation to help you get started:
When signing in to an application that requires MFA approval, you will now receive a push notification on your mobile device.
Make sure notifications are enabled for the XFA app on your device to take advantage of this feature.
You can now automatically approve the first device a user trusts in our Built-in passkey flow. This will guarantee a seamless onboarding experience of new users.
Learn more about Built-in passkey.
When using XFA as an extra factor to your identity provider, you don't use the security of a second factor.
Our new MFA feature can be easily enabled on an integrations through the XFA dashboard. Once it is enabled users will be asked to trust their device, a first device needs to be confirmed through an email link, a next device needs to be confirmed by an already enrolled device. Once devices are trusted, the user will not be asked for a second factor anymore, but the device will inherently act as a second factor.