Before you start
You'll need to be an organisation admin to enable and manage MFA settings for your team.
Why MFA matters
MFA makes it significantly harder for attackers to gain access even if a password is compromised, protecting against common threats like phishing and credential stuffing. Many business insurance policies now require MFA to be enabled where available — Glu supports this and gives you the tools to enforce it consistently across your organisation.
1. Enable MFA for your organisation
As an organisation admin, head to your organisation settings to require MFA for all users whenever they log in.
2. Choose an authentication method
Glu supports the following MFA options:
Passkeys
Security keys
Biometrics
One-time passcodes
💡 Good to know: We recommend agreeing on a consistent MFA method across your business so all team members are set up in the same way.
3. Enable SSO (optional)
You can go further and enable Single Sign-On (SSO) using Google or Microsoft. This requires additional configuration — get in touch with the Glu team to get started.
Helping a user who has lost access to their MFA
If a team member loses access to their MFA, an organisation admin can remove it from their account. The user will be prompted to set up MFA again the next time they log in.
⚠️ Important: The Glu support team cannot assist with bypassing or removing MFA on behalf of any user. This must be managed by an organisation admin.