Set up Akamai MFA

There are a few requirements that you must meet before you can set up your ​Akamai MFA​ service.

Prerequisites

📘

If you are implementing a caching solution in front of ​Akamai MFA​, we would recommend that you do not cache the following paths:

<your-idp-url>/idp/profile/SAML2/Redirect/*

<your-idp-url>/idp/js/akamaimfa.js

Privileges

  • To perform any of the configuration steps, you must have the ​Akamai​ preconfigured Admin role.
  • To provision new users, you must have the Enterprise MFA User Manager role.
  • To set up ​Akamai MFA​ policies, you must have the Enterprise MFA Policy Manager role.

See Role-based access controls to learn more about the administrative roles in ​Akamai MFA​.

Supported mobile devices

The following mobile device OS versions support the ​Akamai MFA​ mobile app:

  • iOS 13 and above (iPad, iPhone, iPod Touch)
  • Android 7 and above (phones and tablets)

Mobile devices that use other authentication methods such as SMS/email OTP as second factors don’t have to run those minimum supported software versions.

Set up your ​Akamai MFA​ service

Follow these steps to get your ​Akamai MFA​ service running:

  1. Provision user profiles by synchronizing your identity management system with ​Akamai MFA​. Enabling communication between those two sources of user data allows you to redirect the IdP's authentication requests to ​Akamai MFA​. See Sync your directory services with Akamai MFA to learn more.

  2. Protect your applications by integrating with ​Akamai MFA​. See Add integrations to learn more.

  3. Define your policies. With policies, you can control access to your protected applications and ensure compliance with the industry standards and your enterprise security requirements. Depending on your needs, you can configure high-level policies as well as granular, user-specific rules, and associate them to users, groups, and applications. See Define policies to learn more.

  4. Enable users to self-enroll in the service. See Enable users to self-enroll to learn about the available enrollment methods.

  5. Deploy your ​Akamai MFA​ service. This stage should include planning for your deployment, the onboarding process for users, and the ​Akamai MFA​ service rollout. See Deploy your installation to learn more.