When authenticating into a system with enforced MFA, the user is required to prove their identity with at least 2 pieces of evidence from the list below:
- Knowledge: something you know (e.g. passwords)
- Posession: something you have (e.g. Yubikey, smart card)
- Inherent: something you are (e.g. fingerprint, Face ID, Optic ID)
- Location: where you are (physical location, network)