oz0 mfa

A web UI account with a password can add a second factor: a code from an authenticator app (TOTP), with recovery codes for when the phone is gone.

For: Operators and developers looking up a command.

A web UI account with a password can add a second factor: a code from an authenticator app (TOTP), with recovery codes for when the phone is gone. A policy can require one in a tenant or the whole cluster. Identity providers ask for their own second factor.

Usage

oz0 mfa [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026