Add multi-factor authentication
- 1 minute to read
- Print
- DarkLight
- PDF
Add multi-factor authentication
- 1 minute to read
- Print
- DarkLight
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
When enabling the multi-factor authentication, an extra security layer is added to the account. You can log in with the password, and additionally with the code sent to a device.
Info
For this feature, Google Authenticator and Microsoft Authenticator are some of the applications that can be used to perform multi-factor authentication.
Info
You can turn off TOTP-based MFA authentication as the system default setting, allowing you to integrate another multi-factor authentication provider. To deactivate, enter the command orbit app mfa-plugin disable via Orbit, and to reactivate, use the command orbit app mfa-plugin enable.
For additional MFA settings, read the article security settings.
Enable multi-factor authentication
To enable the multi-factor authentication for the user, follow these steps:
- Click on the drop-down menu in the title bar next to the username.
- Select Configure MFA.
- Click Yes to proceed with the token settings.
- Launch the authentication application from your mobile device.
- Read the QR code displayed on the screen by using the camera.
- The token is then registered in the application, and an authentication code is displayed.
- After configuring the token on the application, click on the link indicated on your senhasegura screen.
- Fill in the Token with the application-generated code.
- Click Validate.
From this moment, when logging in, you will need to perform the multi-factor authentication.
Info
Events related to multi-factor authentication settings are notified through SIEM AND SYSLOG.
MFA to start sessions
senhasegura allows administrators to force the use of multi-factor authentication before starting a session. This helps ensure that only authorized users can use elevated credentials.
- Navigate to Settings➔System parameters➔System parameters➔Security.
- Enable the option Force multi-factor authentication to start a session?*.
By enabling this option, before starting the session, the user will have to enter the authenticator code configured in senhasegura.
TOTP Token periodic request configuration
This configuration makes it possible to force the token request at each password view or access.
- Go to Settings➔System Parameters➔System Parameters➔Security.
- Set the time parameters:
- Time between token requirement for custody (minutes)
- Time between token requirement for sessions (minutes)
Was this article helpful?
