Use the QCFUM MFA Required Administrative Flag

QCFUM can store an MFA required administrative flag for an eligible Joomla user when the Max/All Access Frontend User Manager and the MFA flag action are enabled. The flag is QCFUM metadata only: saving it does not enable, configure, or enforce Joomla multi-factor authentication.

Use the flag as an audited operational marker for your own account-security process. Actual MFA enrollment and enforcement remain Joomla responsibilities.

Enable the QCFUM Flag Control

In QCFUM Administrator, open Settings → Frontend User Manager Settings and enable MFA required — administrative flag only. The setting is Max/All Access functionality and is disabled when the Frontend User Manager feature is unavailable, while previously saved Max settings remain preserved for a later upgrade.

Set or Clear the Flag

On the frontend Users tab, expand an editable user and use the Security Requirement section. Checking or clearing the option submits manager_mfa_flag. QCFUM stores mfa_required as 1 or 0 in its user-manager flags table and records an audit event.

What the Flag Does Not Do

  • It does not enable a Joomla MFA method.
  • It does not force the user through Joomla MFA setup.
  • It does not verify whether the user is already enrolled in MFA.
  • It does not replace Joomla authentication policy or plugins.

The frontend UI deliberately labels this an administrative flag only, and the success response explicitly states that Joomla MFA enforcement is unchanged.

Authorization Still Applies

The flag can be changed only through the Frontend User Manager action gate: the manager needs qcfum.frontend.manage_users, active Max/All Access entitlement, the MFA-control setting enabled, and a target that remains editable and non-protected. Protected or out-of-scope accounts are refused before the flag handler runs.

Community Discussion

Want to compare Joomla user-management workflows, share practical QCFUM tips, or discuss how other administrators use this feature? Visit the QC Frontend User Manager Community. For private support, bug reports, account-specific entitlement problems, or feature requests, use the QuantaCade support system.