# End User Multi-Factor Enrollment

- Link: https://www.agilicus.com/anyx-training/end-user-multi-factor-enrollment/
- Published: 2025-03-05T01:34:51+00:00
- Author: Don Bowman

![End_User_Multi_Factor_Enroll](https://www.agilicus.com/www/3468b9d4-2025-03-05-
end_user_multi_factor_enroll.gif)

End users can setup their multi-factor via https://profile.__MYDOMAIN__. On the ‘
profile’ menu, select ‘multifactor authentication’. From here, depending on the 
administrator setup, they will have one or two methods:

 * [TOTP](https://en.wikipedia.org/wiki/Time-based_one-time_password) (Time-Based
   One-Time Password).
 * [WebAuthn](https://en.wikipedia.org/wiki/WebAuthn) (USB FIDO keys, Trusted Platform
   Modules, Biometrics, PassKey)

Both are secure. Both are completely private: no information is exchanged from their
device to the system.

The WebAuthn set of standards are typically simpler for end-users to use: they are
push-based, they are locked to a single device.

The user can enroll multiple WebAuthn methods (e.g. my phone, my work laptop TPM,
my YubiKey).