Agent
MFA enforcement auto-remediation
The MFA enforcement agent helps you maintain strong authentication across critical systems. It identifies users who do not have MFA enabled (or are not compliant with your MFA requirements), then enforces your policy using admin APIs—or suspends access and creates a ticket if enforcement requires manual action.
What the agent does
For connected platforms, the SecureSlate agent can:
- Scan for MFA compliance (per user, group, or org policy).
- Detect exceptions (service accounts, break-glass accounts, API-only identities).
- Enforce MFA requirements via admin settings where supported.
- Suspend or restrict access for accounts that remain non-compliant.
- Notify the user and owner with clear next steps to re-enable access.
- Record evidence for audits (policy state + remediation actions).
Run auto-remediation
- Open the failing MFA-related test.
- Click Auto Fix on the SecureSlate AI can fix this card.
- Review which users will be impacted and how enforcement will be applied.
Review and approve
You can review:
- Non-compliant users detected in each platform
- Action plan (enable org policy vs suspend vs create ticket)
- Exceptions list (break-glass / service accounts)
Then choose:
- Approve — The agent applies policy updates and/or suspensions and logs evidence.
- Reject — Close without changing anything.
Common policies you can enforce
- MFA required for all users
- MFA required for admins only (minimum baseline)
- Stronger MFA for privileged roles (for example FIDO2/WebAuthn)
- Grace window before suspension (for example 7 days)
