Owners can enable MFA for all users in their organization.

1. Click the profile icon.
   
2. Select Organization Settings.
3.  Open Security tab.
4.  Select Required option in Authentication drop-down.
   
5. . Click Confirm.
    

Once settings are applied, and page is refreshed, all users in your organization will see Microsoft Two-Step Verification screen. This step is required for first MFA setup. All instructions are displayed on the screen and users will need to install Microsoft Authenticator app to set up MFA.

Follow the onscreen instructions and click Proceed to enable authentication. Users will need to enter 6-digits password from Microsoft Authenticator app every time for logging in to TSM organization. If MFA is enabled on the organization level by an Owner, users will not be able to turn it off in their account since it is a required process for the whole organization.

Users can enable MFA for their particular account if multi-factor authentication is optional on the organization level. This ability is available for all user roles. To enable, follow these steps:

1. Click the profile icon.
2. Select My profile.
3. Open Security tab.
4.  Turn on Microsoft Two-Step Verification toggle.
   
5. Click the Turn On button in the confirmation dialog.

In case a user changes their smartphone or has any issues with MFA, they can use Reset trusted device option to set up MFA one more time. 

1. Go to the ThinkSmart Manager portal (portal.thinksmart.lenovo.com).
2. Log in using your Lenovo credentials.
3. Click Reset trusted device option.
   
4. Check your email box.
5. Follow the link in the email.
6. Follow the onscreen instructions to enable MFA.