---
title: "auth"
manual: "TypoScript Explained"
version: "13.4"
permalink: "https://docs.typo3.org/permalink/t3tsref:user-auth@13.4"
source: "UserTsconfig/Auth.rst"
rendered: "2026-09-19T07:15:48+00:00"
---

# auth {#user-auth}

The `auth` key is used for configuration of authentication services.

-   [Properties](https://docs.typo3.org/permalink/t3tsref:properties@13.4)
-   [Examples](https://docs.typo3.org/permalink/t3tsref:examples@13.4)

## Properties {#user-auth-properties}

-   **auth.BE.redirectToURL**

    -   *Type:* string

    Specifies a URL to redirect to after login is performed in the backend login form. This
    has been used in the past to redirect a backend user to the frontend to use frontend editing.

### auth.mfa.required {#user-auth-mfa-required}

-   **auth.mfa.required**

    -   *Type:* boolean

    Require multi-factor authentication for a user. This overrules the global configuration
    and can therefore also be used to unset the requirement by using `0` as value.

    **EXT:site_package/Configuration/user.tsconfig**

    ```typoscript
    auth.mfa.required = 1
    ```

### auth.mfa.disableProviders {#user-auth-mfa-disableproviders}

-   **auth.mfa.disableProviders**

    -   *Type:* string, comma separated list of strings
    -   *Example:* [Example: Disable a multi-factor authentication provider](https://docs.typo3.org/permalink/t3tsref:user-auth-mfa-disableproviders-example@13.4)

    Disable multi-factor authentication providers for the current user or group.
    It overrules the configuration from the Backend usergroup "Access List". This
    means, if a provider is allowed in "Access List" but disallowed with TSconfig,
    it will be disallowed for the user or user group.

### auth.mfa.recommendedProvider {#user-auth-mfa-recommendedprovider}

-   **auth.mfa.recommendedProvider**

    -   *Type:* string
    -   *Example:* [Example: Set a recommended multi-factor authentication provider](https://docs.typo3.org/permalink/t3tsref:user-auth-mfa-recommendedprovider-example@13.4)

    Set a recommended multi-factor authentication provider on a per user or user group basis, which overrules
    the global configuration.

## Examples {#user-auth-mfa-example}

### Example: Disable a multi-factor authentication provider {#user-auth-mfa-disableproviders-example}

**EXT:site_package/Configuration/user.tsconfig**

```typoscript
auth.mfa.disableProviders := addToList(totp)
```

### Example: Set a recommended multi-factor authentication provider {#user-auth-mfa-recommendedprovider-example}

**EXT:site_package/Configuration/user.tsconfig**

```typoscript
auth.mfa.recommendedProvider = totp
```