An MFA system requires multiple factors to be presented during logon in order to verify a user's identity. Each authentication factor must be from a separate category of credential types: 1) Something you know, 2) Something you have, and 3) Something you are.