Certified Identity and Access Management Designer

Multi-factor authentication adds an additional verification factor beyond the user’s password, and a High Assurance session policy requires users to verify their identity with two-factor authentication when logging in to the connected app. Restricting every affected profile to the internal network is unsuitable for users who commonly access the mobile app while away from the office; disabling SSO is not a security control that provides the required additional authentication assurance.