Is this a valid statement regarding authentication and authorization?

The statement is valid. Multi-Factor Authentication (MFA) strengthens authentication by requiring more than a single verification mechanism before access is granted. Authentication factors are generally categorized as something the user knows, something the user possesses, or something the user inherently is. Requiring multiple factors substantially reduces the effectiveness of a compromised password because possession of that password alone is insufficient to complete authentication.

Identity Security Cloud supports MFA through an external authenticator application. When MFA is configured for an Identity Profile, affected users register an authenticator and subsequently provide a generated verification code during authentication. SailPoint also distinguishes sign-in MFA from two-factor verification used for password resets and account unlocking, where administrators can explicitly require users to complete two configured verification methods.

Therefore, the video's characterization of MFA as requiring two or more forms of verification correctly reflects the underlying security principle. MFA should not be confused with authorization: authentication establishes identity, whereas authorization determines what authenticated identities are permitted to access.

Study Guide Reference: Access Management — Multifactor Authentication, Authentication Factors, Strong Authentication and Identity Profile Sign-In Methods.

===============