# MFA Authentication Automation Guidance

Use this article to decide how AIQ tests should handle applications protected by multi-factor authentication.

## Validation workflow

1. Confirm the approved MFA strategy with the application owner or identity team before building the scenario.
2. Use a controlled test account, test IdP policy, or token-based flow that is explicitly approved for automation.
3. Record evidence of the authentication path without logging OTPs, recovery codes, personal phone numbers, or secrets.

---

Last updated: September 30, 2026