oz0 mfa require

Require a second factor with passwords in a tenant (its owners may) or, with --cluster, everywhere (cluster admins may).

For: Operators and developers looking up a command.

Require a second factor with passwords in a tenant (its owners may) or, with --cluster, everywhere (cluster admins may). Cluster admins and readers see every tenant, so a tenant's policy applies to them too. Password sessions without a second factor end; the next sign-in asks for one, or to set one up. --off stops requiring it.

Usage

oz0 mfa require [flags]

Flags

FlagTypeDefaultDescription
--clusterboolthe whole cluster instead of a tenant
--offboolstop requiring it
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026