Learn how to set up or update your Unenrolled User or Enrolled User policies.

The Unenrolled User policy

It defines the way you onboard new users who don't have access to a registered device and attempt to access protected applications. By default, an unknown, unprovisioned user is blocked by the service. This policy lets you change that behavior and evaluate an unknown, unprovisioned user the same as an unenrolled user. The values that you can set as your Unenrolled User policy are the following:

Unknown User (if evaluation is enabled)	Unenrolled User
Enroll. Unknown users are provisioned and required to self-enroll in Akamai MFA before they can access an enterprise application.	Enroll. Requires users to self-enroll in Akamai MFA before they can access an enterprise application.
Allow. Lets unknown, unprovisioned users skip Akamai MFA authentication when they access an enterprise application. This is not recommended.	Allow. Lets unenrolled users skip Akamai MFA authentication when they access an enterprise application.
Deny. Prevents unknown, unprovisioned users from accessing the protected application.	Deny. Prevents unenrolled users from accessing the protected application.

To set up or update your Unenrolled User policy, follow these steps:

In the Enterprise Center navigation menu, select Multi-factor Authentication > Policies.
On the Policies page, navigate to the policy that you want to edit and click the policy's name to display its settings.
The policy configuration page displays.
In the sidebar menu, select Unenrolled User to enable the edition of the Unenrolled User policy.
In Unenrolled User, select the policy that Akamai MFA must follow when an unenrolled user attempts to access a protected application.
- Optionally, you can Evaluate an unknown, unprovisioned user the same as an Unenrolled user.

📘
Enroll is the default and recommended unenrolled user policy.

Click Save & Deploy.

This overwrites and saves your newly added Unenrolled User policy configuration.

The Enrolled User policy

It defines the policy that you want to apply to users who exist in the Akamai MFA service and have at least one authentication device assigned to their account.
The values that you can set as your Enrolled User policy are the following:

Enforce. Enforces enrolled users to prove their identity using one of the allowed Akamai MFA second factors.
Bypass. Lets enrolled users skip the secondary authentication.
Block. Prevents enrolled users from accessing the protected application.

To set up or update your Enrolled User policy, follow these steps:

In the Enterprise Center navigation menu, select Multi-factor Authentication > Policies.
On the Policies page, navigate to the policy that you want to edit and click the policy's name to display its settings.
The policy configuration page displays.
In the sidebar menu, select Enrolled User to enable the edition of the Enrolled User policy.
In Enrolled User, select the policy that Akamai MFA must follow when a user that already exists in the service attempts to access a protected application.

📘
Enforce is the default and recommended existing user policy

Click Save & Deploy.

This overwrites and saves your newly added Enrolled User policy configuration.