# Feature Request: Multi-Factor Authentication (MFA) for Liferay DXP Cloud Console

**URL:** <https://discuss.liferay.com/t/feature-request-multi-factor-authentication-mfa-for-liferay-dxp-cloud-console/640>\
**Category:** Security\
**Created:** [May 22, 2026, 5:53am UTC](https://discuss.liferay.com/t/feature-request-multi-factor-authentication-mfa-for-liferay-dxp-cloud-console/640 "2026-05-22T05:53:54Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![pkoskela](https://avatars.discourse-cdn.com/v4/letter/p/53a042/32.png) [@pkoskela](https://discuss.liferay.com/u/pkoskela)\
**Post date:** [May 22, 2026, 5:53am UTC](https://discuss.liferay.com/t/feature-request-multi-factor-authentication-mfa-for-liferay-dxp-cloud-console/640/1 "2026-05-22T05:53:54Z")

</div>

Liferay DXP Cloud Console (`console.liferay.cloud`) currently supports only username/password and SSO authentication. For organizations where SSO is not an option, console access is protected by credentials alone — a significant security gap.

**Problem Statement** A single compromised admin account can give an attacker full control over deployments, environment variables, database backups, and service configurations across multiple production environments simultaneously. There is no second factor to limit the blast radius of a credential compromise.

**Proposed Solution** Implement MFA for `console.liferay.cloud`, including:

- TOTP-based authenticator app support (Google Authenticator, Authy, etc.)

- MFA enforcement policy at the organization level

**Priority Justification**

- Affects all LCP customers not using SSO

- Production environment access is at stake

- Aligns with security baseline expectations for any cloud platform handling enterprise workloads