--- title: Use Location Filter in MFA Context description: Use the location filter criteria created in MFA Context. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/use-lf-in-mfa.html release: australia product: Authentication classification: authentication topic_type: task last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Tutorial: Use Location Filter criteria, Location Filter, Filter criteria, Adaptive authentication, Authentication, Access Management] --- # Use Location Filter in MFA Context Use the location filter criteria created in MFA Context. ## Before you begin Role required: adaptive\_auth\_admin Plugin required: **Zero Trust - Location Based Access** \(`com.snc.zero_trust_location_access`\). The following procedure describes on how to create a Location Filter with the countries that you want to configure MFA as a second factor for authentication to the users based on the location. ## Procedure 1. Navigate to **All** > **Adaptive Authentication** > **Auth Policy Context** > **MFA Context**. 2. Select the **Step-Up MFA Policy** information icon and then select **Open Record** to open the **MFA Context**. 3. On the Step-Up MFA Policy page, under the Policy Inputs tab, select **New**. 4. Add the Location Filter input and **Submit**. For example, you want to display MFA for users logging in to the instance outside Australia. \[Omitted image "location-based-mfa.png"\] Alt text: Location Filter for MFA 5. On the Step-Up MFA Policy page, select the Policy Conditions tab and select **New**. 6. In the Conditions page, provide the label, conditions, and set it to true. \[Omitted image "conditions-mfa.png"\] Alt text: Condition for MFA 7. Select **Submit**. 8. On the Step-Up MFA Policy page, activate the MFA Policy if it’s **Deactivated**. 9. Select **Update** to update the configuration. The users outside the configured country \(Australia\) selecting the instance link, specifying their credential; will be shown with the MFA screen to provide the second factor credentials to log in to the instance.