MFA Turned off, still needs Verification

[AJ Fowler]

Hey all, 
  I have a group of 75+ users that are logging into the same account we will say "test@company.com" MFA is turned off, but it continues to ask for a verification code sent to an email box that we will not be providing access to for PCI reasons. I am imagining that the reason this is happening is because of the frequency of logins to the same account from different IPs, Time Zones, etc and wants to verify it is not a bot or a scrape attempt at the resource. 

  Am I wrong in this thought or should I be thinking of something else? The 75+ people that are accessing this are not only employees, but clients we have that need access to get steps on this document. My current solution is either setting up a second service account that is set up for MFA, and allowing that team to provide the email address to certain users/people or designating a person to be the delegate to manage that. Any advice is appreciated. 

[Trudy Claspill · Accepted solution]

Hello @AJ Fowler 

Welcome to the Atlassian community.

I have to ask why are you having 75+ people access your Confluence product through one user account? They should each have their own user account so that you will be able to track the logins and activity per user for auditing purposes.

[AJ Fowler]

Yeah... that was my question to the user asking for that. Thanks for that answer. I would rather set that up. Thanks you.