In this article

The Organization Settings page hosts settings for org-wide Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Client Admin Site Creation, as well as settings to limit the display of personal data.

Two-Factor Authentication 

Require MFA for all users at the Organization to add an additional layer of security to the account. Enabling this setting triggers individual users to setup MFA upon their next login. 

✍️ Accounts started after 1 July 2025 will not have this feature in their dashboard because MFA is enforced on all new DNSFilter dashboard users.

Single Sign-On

Account users with Super Admin permissions or higher to configure SSO for all users within the organization. Configure SSO with any Identity Provider (IdP) that supports the generic OpenID Connect (OIDC) authentication process. 

Client Admin Site Creation

✍️ This setting is only available in the MSP dashboard.

The Client Admin Site Creation card controls whether client Organization admins can create Sites and manage local domains for their Organization.

Toggle Client admins can create sites on to enable this. When enabled, client admins can create Sites and manage local domains for their Organization. When disabled, only MSP admins can create Sites and update local domains. This setting is off by default.

Read-only users cannot adjust this toggle. Hovering over the toggle displays: "Your role is limited to read-only access for this setting. Contact an admin with edit access to update it."

Limit Display of Personal Data

The Limit Display of Personal Data setting reduces the visibility of personally identifiable information (PII) across the DNSFilter dashboard, logs, reports, and exports. Enabling stricter privacy modes limits user and device details and may disable the collection of certain Roaming Client fields.