---
title: "auth"
manual: "TypoScript Explained"
version: "14.3"
permalink: "https://docs.typo3.org/permalink/t3tsref:user-auth@14.3"
source: "UserTsconfig/Auth.rst"
rendered: "2026-09-28T13:42:25+00:00"
---

# auth {#user-auth}

The `auth` key is used for configuration of authentication services.

-   [Properties](https://docs.typo3.org/permalink/t3tsref:properties@14.3)
-   [Examples](https://docs.typo3.org/permalink/t3tsref:examples@14.3)

## Properties {#user-auth-properties}

-   **auth.BE.redirectToURL**

    -   *Type:* string

    <!-- TODO: no Markdown rendering for "deprecated" -->

    The TSconfig option auth.BE.redirectToURL has been
    deprecated in TYPO3 v14.If a redirect after a successful backend login is required, it is
    recommended to create custom PSR-15 middleware to handle the
    redirection.

### auth.mfa.required {#user-auth-mfa-required}

-   **auth.mfa.required**

    -   *Type:* boolean

    Require multi-factor authentication for a user. This overrules the global configuration
    and can therefore also be used to unset the requirement by using `0` as value.

    **EXT:site_package/Configuration/user.tsconfig**

    ```typoscript
    auth.mfa.required = 1
    ```

### auth.mfa.disableProviders {#user-auth-mfa-disableproviders}

-   **auth.mfa.disableProviders**

    -   *Type:* string, comma separated list of strings
    -   *Example:* [Example: Disable a multi-factor authentication provider](https://docs.typo3.org/permalink/t3tsref:user-auth-mfa-disableproviders-example@14.3)

    Disable multi-factor authentication providers for the current user or group.
    It overrules the configuration from the Backend usergroup "Access List". This
    means, if a provider is allowed in "Access List" but disallowed with TSconfig,
    it will be disallowed for the user or user group.

### auth.mfa.recommendedProvider {#user-auth-mfa-recommendedprovider}

-   **auth.mfa.recommendedProvider**

    -   *Type:* string
    -   *Example:* [Example: Set a recommended multi-factor authentication provider](https://docs.typo3.org/permalink/t3tsref:user-auth-mfa-recommendedprovider-example@14.3)

    Set a recommended multi-factor authentication provider on a per user or user group basis, which overrules
    the global configuration.

## Examples {#user-auth-mfa-example}

### Example: Disable a multi-factor authentication provider {#user-auth-mfa-disableproviders-example}

**EXT:site_package/Configuration/user.tsconfig**

```typoscript
auth.mfa.disableProviders := addToList(totp)
```

### Example: Set a recommended multi-factor authentication provider {#user-auth-mfa-recommendedprovider-example}

**EXT:site_package/Configuration/user.tsconfig**

```typoscript
auth.mfa.recommendedProvider = totp
```