---
title: "auth"
manual: "TypoScript Explained"
version: "main"
permalink: "https://docs.typo3.org/permalink/t3tsref:user-auth@main"
source: "UserTsconfig/Auth.rst"
modified: "2026-09-15T19:22:01+00:00"
---

# auth

The `auth` key is used for configuration of authentication services.

-   [Properties](https://docs.typo3.org/permalink/t3tsref:properties@main)
-   [Examples](https://docs.typo3.org/permalink/t3tsref:examples@main)

## Properties

### auth.mfa.required

-   **auth.mfa.required**

    -   *Type:* boolean

    Require multi-factor authentication for a user. This overrules the global configuration
    and can therefore also be used to unset the requirement by using `0` as value.

    **EXT:site_package/Configuration/user.tsconfig**

    ```typoscript
    auth.mfa.required = 1
    ```

### auth.mfa.disableProviders

-   **auth.mfa.disableProviders**

    -   *Type:* string, comma separated list of strings
    -   *Example:* [Example: Disable a multi-factor authentication provider](https://docs.typo3.org/permalink/t3tsref:user-auth-mfa-disableproviders-example@main)

    Disable multi-factor authentication providers for the current user or group.
    It overrules the configuration from the Backend usergroup "Access List". This
    means, if a provider is allowed in "Access List" but disallowed with TSconfig,
    it will be disallowed for the user or user group.

### auth.mfa.recommendedProvider

-   **auth.mfa.recommendedProvider**

    -   *Type:* string
    -   *Example:* [Example: Set a recommended multi-factor authentication provider](https://docs.typo3.org/permalink/t3tsref:user-auth-mfa-recommendedprovider-example@main)

    Set a recommended multi-factor authentication provider on a per user or user group basis, which overrules
    the global configuration.

## Examples

### Example: Disable a multi-factor authentication provider

**EXT:site_package/Configuration/user.tsconfig**

```typoscript
auth.mfa.disableProviders := addToList(totp)
```

### Example: Set a recommended multi-factor authentication provider

**EXT:site_package/Configuration/user.tsconfig**

```typoscript
auth.mfa.recommendedProvider = totp
```