Identity & access
Reviewed 26 March 2026
Multi-factor authentication
MFA is mandatory for all administrative interfaces and recommended for clubs.
Download PDF
Owner: Head of Security
All internal access to administrative and production systems requires MFA via TOTP or hardware security key. Phishing-resistant WebAuthn is supported.
Club administrators can require MFA for all members of their club via account-level policy.