Baidu Intelligent Cloud Enables Login Protection MFA Multi-Factor Authentication Notification for All Users
Upgrade time:
From May 26, 2025 (Beijing time)
Upgrade content:
Baidu AI Cloud remains steadfast in its commitment to strengthening the security of its cloud services. As part of its security measures, Multi-factor Authentication (MFA) for login protection effectively prevents account hijacking and unauthorized access. Starting May 26, 2025, Baidu AI Cloud will progressively enable Multi-factor Authentication (MFA) to bolster account security.
Upgrade impact:
Login protection settings of root account
If the configuration of Account Management - Security Settings - Login Protection is set to Disabled, the system will switch it to Enabled during upgrade, and select SMS Authentication + Virtual MFA. Once enabled, the root account must use SMS or Virtual MFA for login protection authentication when signing into the console. If the root account has not been bound to a virtual MFA device, the device binding and login protection authentication can be completed simultaneously during login
Reference: Root Account Login Protection
Login protection configuration for IAM users
If IAM User Login Protection is disabled under Identity and Access Management - User Management - IAM User Details - Two Factor Authentication, the system will enable it during upgrade, and select SMS + Virtual MFA. Once enabled, the IAM user must use SMS or virtual MFA for login protection authentication when signing into the console. If the IAM user has not been bound to a virtual MFA device, the device binding and login protection authentication can be completed simultaneously during login
Reference: IAM User Login Protection
Effective scope:
- Root account
All root accounts without login protection enabled - IAM users
All IAM users without login protection enabled
For IAM users with User-based SSO enabled, this upgrade will be executed. However, when signing in to Baidu AI Cloud via SSO, multifactor authentication for login protection will not be performed, therefore, this has no actual impact on user login
Release method:
The upgrade will be rolled out in batches by root accounts starting from May 26, 2025. Users will be notified via SMS, email, and in-site messages about the specific timing of the system upgrade in advance
Login protection MFA instructions:
Baidu AI Cloud supports SMS authentication and MFA device authentication. After enabling login protection and Multifactor Authentication (MFA), it is possible choose your preferred authentication method:
- If the currently selected authentication method is unavailable, users may switch to alternative methods for authentication
- If all authentication methods are unavailable, you may submit a request to unbind the virtual MFA device and, after identity authentication, rebind another security device for certification
Support:
Before this upgrade release, users are highly welcome to proactively enable MFA for both root accounts and IAM users, and then configure the preferred authentication method
If MFA login protection is undesired, users may disable it for root accounts and IAM users after system upgrade. However, please thoroughly assess potential losses and impacts of disabling MFA protection in case of credential leakage before making changes.
In case of any questions about the announcement, please feel free to contact us. Thank you for your understanding and support
