PayPal · PayPal User Agreement · View original document ↗

MFA Compliance Attestation for Business Account SAML SSO Users

Medium severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity PayPal recorded 14 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for PayPal Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The provision establishes a regulatory compliance verification mechanism for SAML SSO deployments, linking account access configuration to documented adherence with specific MFA safeguarding standards. This creates a documented compliance posture requirement within the contractual framework for users implementing SSO authentication methods.

Clause Stability Stable

0
Changes
3
Months Monitored
Apr 9, 2026
First Seen
Apr 9, 2026
Last Seen
This clause type exists across 272 other provisions on other platforms.

Consumer impact (what this means for users)

Users implementing SAML SSO for business accounts must represent and warrant ongoing compliance with designated MFA regulations. Non-compliance with the attestation requirement may constitute a breach of the user agreement terms governing SSO access authorization.

How other platforms handle this

Zillow Medium

You agree to defend, indemnify, and hold harmless Zillow and its officers, directors, employees, agents, and third parties, for any losses, costs, liabilities, and expenses (including reasonable attorneys' fees) relating to or arising out of your use of or inability to use the Services, your violati...

Grindr Medium

You agree, to the fullest extent permitted under applicable law, to indemnify, defend, and hold Grindr (and its affiliated companies, contractors, employees, agents, suppliers, licensors, successors, and assigns) harmless from any and all claims, demands, suits, actions, losses, costs, damages, and ...

Ledger Medium

YOU AGREE NOT TO EXPORT, RE-EXPORT, OR TRANSFER ANY PRODUCTS (INCLUDING SOFTWARE) THAT YOU HAVE PURCHASED ON THE WEBSITE TO ANY COUNTRY, INDIVIDUAL, CORPORATION, ORGANISATION, OR ENTITY TO WHICH SUCH EXPORT IS RESTRICTED OR PROHIBITED UNDER THE EXPORT CONTROL AND SANCTIONS LAWS. YOU FURTHER REPRESEN...

See all platforms with this clause type →

Monitoring

PayPal has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you, or any other person associated with your account, use SAML SSO (Security Assertion Markup Language Single Sign-On) to allow access to your accounts with PayPal, you attest that you are compliant with applicable state and Federal Multi-Factor Authentication ("MFA") regulations (e.g., NY DFS Part 500 and 16 CFR Part 314: Standards For Safeguarding Customer Information).

— Excerpt from PayPal's PayPal User Agreement

Applicable regulations

FTC Act Section 5
United States Federal

Provision details

Document information
Document
PayPal User Agreement
Entity
PayPal
Document last updated
May 5, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 9, 2026
Record ID
CA-P-002285
Document ID
CA-D-00044
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
787aedff80f89f2d9da4fd79756bbd226f8a5338c9e19c15b2a2fa0d01f59a90
Analysis generated
March 6, 2026 20:26 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: PayPal
Document: PayPal User Agreement
Record ID: CA-P-002285
Captured: 2026-03-06 20:26:28 UTC
SHA-256: 787aedff80f89f2d…
URL: https://conductatlas.com/platform/paypal/paypal-user-agreement/mfa-compliance-attestation-for-business-account-saml-sso-users/
Accessed: June 18, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does PayPal's MFA Compliance Attestation for Business Account SAML SSO Users clause do?

The provision establishes a regulatory compliance verification mechanism for SAML SSO deployments, linking account access configuration to documented adherence with specific MFA safeguarding standards. This creates a documented compliance posture requirement within the contractual framework for users implementing SSO authentication methods.

How does this clause affect you?

Users implementing SAML SSO for business accounts must represent and warrant ongoing compliance with designated MFA regulations. Non-compliance with the attestation requirement may constitute a breach of the user agreement terms governing SSO access authorization.

Is ConductAtlas affiliated with PayPal?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.