Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [two-factor-authentication]

1
vote
0answers
15 views

Can I manage an Azure Active Directory (AD) guest user's multi-factor authentication (MFA)?

We have a guest user in our Azure Active Directory who has lost their mobile phone and is unable to sign-in using the multi-factored authentication. Is it possible for us, as admins of the Azure ...
1
vote
1answer
49 views

Enforce 2FA on user accounts used in Cloud IAM

I have a GCP project where I work with people external to my team. For the moment I assigned them Cloud IAM roles, in order to give them permissions to different parts of the project. But I was ...
-2
votes
1answer
75 views

Does iphone Touch ID count as 2FA? [closed]

Yes it does because The customer has the physical iPhone The customer 'is' the owner of the fingerprint But no it doesn't because 1=>2 : If you steal the customer's iphone, the fingerprint is now ...
5
votes
2answers
363 views

2FA via freeRADIUS, ignoring password

I've been tasked with setting up freeRADIUS to prompt a user for their second authentication factor (eg. Google Authenticator OTP) BUT without first checking the user's password. I'm coming into this ...
0
votes
0answers
645 views

Is using HOTP only authorization considered weak?

I have seen many experts advising usage of some kind of OTP as second step of 2FA schemes. I fully understand 2FA is more secure than Single Authorization, but it is also more inconvenient for casual ...
0
votes
1answer
679 views

Using ADFS in Windows 2012 R2 with Azure Multi-factor Authentication

Thanks in advance for reading this. I want to require users to use the Azure mobile app for multifactor authentication when they log on to their Office 365 mailboxes. I do not need to use MFA to ...
0
votes
2answers
180 views

Security concerns with Microsoft Authenticator App - it can approve requests from locked iPhone?

We're using the Microsoft Authenticator App for providing Multi-factor authentication (MFA) to resources protected by Azure AD. I noticed you can approve a request by swiping the push notification ...
1
vote
0answers
336 views

Authenticate openvpn clients by certificate OR user/pass

I configured my openvpn server to authenticate clients with user/pass (ldap) and OTP/2FA (google authenticator). It works fine! I have osx clients that use Tunnelblick as openvpn client and it doesn'...
0
votes
1answer
572 views

RDP on premises with 2FA on Azure AD

We are looking to implement a two-factor authentication mechanism for our client's Remote Desktop servers (not running on Azure). All my clients have Azure Active Directory, so I thought I could ...
0
votes
1answer
78 views

PAM Ignore Password Prompt Upon Successful Login

I have a CentOS 7 server that uses key based authentication for login, along with using Google Authenticator for two-factor authentication. I am wishing to set it up, so that upon a successful login (...
0
votes
1answer
80 views

want SSH banner to show up before OTP and password request

We use two-factor-authentication for some servers, i.e. OTP (one time password) token plus password. I want to provide users with some informations BEFORE they are asked for their credentials. With ...
0
votes
2answers
166 views

Implementing 2 -Factor Authentication

My company access a Third-party website, that uses a simple username + password authentication method. This vendor could restrict the application access (website) to a defined ip range. We are trying ...
1
vote
1answer
1k views

Can you use the same Gemalto MFA fob for multiple AWS accounts?

I control multiple AWS accounts. I'd like to use MFA for the root logins. I have a Gemalto hardware key fob from Amazon (docs) registered for MFA for the root account on one of them. I tried to add ...
1
vote
0answers
2k views

Setting up Apache 2.4 reverse proxy with SSL and authentication both on proxy AND backend

Goal: a client authenticates against apache 2.4 reverse proxy with OTP (AuthType basic), is then forwarded to the backend server (apache 2.2) where further individual authentication is required (...
11
votes
1answer
3k views

U2F (YubiKey, etc) and Active Directory

I'm searching for information about how to integrate U2F (using YubiKey or similar devices) into an Active Directory Windows Domain (Will be a Windows 2016 Server). Especially I'm interested in ...
2
votes
1answer
637 views

is sharing the same TOTP across multiple servers any less secure?

Are there ("not insignificant") security implications to using the same OTP secret across multiple servers? On my network, I'm running gitlab-ce, nextcloud, and LTB self-service password among a few ...
0
votes
2answers
104 views

Two factor authentication for password login but not for login using keys files

I configured ssh to using keys files situated in ~/.ssh to login. Now I'd like to install a two factor authentication when using password, but not required when using key files. I've seen how to ...
0
votes
1answer
98 views

Google-2fa: How to recover an account when emergency codes are not available? [closed]

There's a server in my company which is configured with Google two-factor authentication. A user from the company has lost his phone and can't find his emergency codes. What can be done in order to ...
0
votes
1answer
1k views

How to secure AD administration with MFA

I'm evaluating an MFA solution such as Duo or Okta (any one have an opinion on that?). Adding MFA to web logins is straight forward but I want to add another layer of security to our Active Directory ...
1
vote
1answer
424 views

linOTP to openVPN authentication ubuntu 12.04

I am working on a project in which I have to install a one-time password authentication. I have successfully installed openVPN to which I can connect without any authentication. I have installed the ...
1
vote
1answer
2k views

How to Configure Roundcube/Dovecot for *Effective* 2-Factor Authentication

There are several Roundcube plugins that provide two-factor authentication. However, the issue I now see is that I can still simply log in via IMAP/SMTP, without 2-FA (obviously). 2-FA is (effectively)...
1
vote
0answers
538 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
1
vote
2answers
184 views

Two factor SSH authentication on multiple servers

I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for ...
0
votes
1answer
2k views

google-authenticator for two-factor-authentication support with openvpn client on linux

I am trying to get openvpn client to work with google-authenticator and two-factor-authentication. I cannot alter the server in any way (i.e. I cannot do password/token concactenation via pam mods, ...