Org Admin options for MFA

Attend Anywhere release R93 (13th August 2025) gives all those with platform logins the ability to enable multi-factor authentication (MFA). As an Org Admin we recommend setting MFA to prompted, as it provides additional security and its use will be encouraged for NHS and many staff belonging to public bodies soon.

We have a page explaining MFA aimed at Near Me Service Providers and Service Admins. In most cases, for NHS staff, we recommend NHS email is used for authentication as they should be able to access their email accounts on the same device they will use to join Near Me calls. For staff using mobile devices, Edge must be installed on them to enable them to access NHS Scotland email accounts. Most other browsers will work on Windows or macOS devices.

By default, all users have the option to enable MFA for their own account. Org Admins can enforce a prompt for all users within an Org Unit (OU).

If you would like your users to be prompted to use MFA when they next login, you can easily enable this on a per OU basis.

Near Me - Org Admin view of Org Units

Identify the Org Unit to set up MFA prompts on, Click Settings in the right-hand pane then select Multi-Factor Authentication (MFA)…

Near Me - Org Admin choice of MFA prompts

Change Security policy from Optional to Prompted and Save.

When staff with roles within any of the Waiting Areas within that OU next log into the platform they will see a prompt to enable MFA if they have not already enabled it themselves.


Reset a user’s MFA

Near Me - Org Admin - reset user mfa status

Org Admins can reset the MFA status of any platform account within that OU. To do so, access the Users setting, find the relevant user. Click on the user and then MFA Settings… from the drop-down.

Near Me - Org Admin screen for turning off MFA for a user

Tick the box for Turn off MFA for [User Name]. The click Disable MFA. You’ll get a further ‘are you sure’ prompt. If you are, click yes to it.

That removes MFA for the platform account and they will be able to login without it. You should encourage them to activate MFA again when they can.