If this answer helped you, please mark it as 'Verified' so other users may reference it.Two-factor authentication (2FA) is a subset of MFA, both increasingly being employed to increase security beyond the level provided by passwords alone. I can answer any questions you have though. Unfortunately the best approach seems to be changing your initial setup. I'm sorry that there isn't a simpler answer for this. It's possible you could use the WebServicesSDK for this, but the phone activation is the big issue there as it takes them coding the QR creation and all of that from the data provided and would definitely need developers to do so and it’s unlikely they would be able to implement this and only the PG would be able to help them get this implemented.' In addition without password it would not be MFA as the password (something you know) is the first factor. We need some way to authenticate the user to verify they are who they say they are to setup MFA. This can be to AD (which if the server is not joined then it would be the local users on the server), LDAP server, or Radius server.

'The user portal requires some type of primary authentication. Here is what I have received from our MFA SME: We were waiting for a response from the product team. Is that possible to utilize configured 2FA as a first authentication method, if password login (since there's none) can not be used?Īny other possible approach to resolve the issue? Is there any way to configure SSO login for the users? The ideal solution - allow users to log in to the User Portal and follow the communicated steps to enable and configure Auth App on their phone.Īlternatively, the entire service desk team would go through the logistics nightmare of communicating the QR code to the end-users. It has been requested that users switch from OATH token to Auth App. Once a link is clicked, the web server initiates a call to Web Services API and invokes the second factor for the user, while the user sees the corresponding prompt (OATH) to enter a challenge. The call for the second factor for the user in question occurs when a user tries to launch an application from a web portal. This means that users are not able to login to User Portal. On one of our MFA servers, users are created manually and the server is not configured with an identity source to validate the users. The question is about the ON-PREM MFA server and Single Sign-On.

Mfa qr code