Online Help > Support/Resources > Knowledge Base

Configure Two-factor Authentication (2FA)

Steps

 

BadgeInfo48x48

This feature is only available when using a Devolutions Server Corporate license

In the Server Settings, select the Two-Factor tab

 

Two-Factor tab

Two-Factor tab

 

General

 

OPTION

DESCRIPTION

2FA usage

None: Will not be using the two factor authentication

Optional: Only users with 2FA configured in their profile will be prompted with a 2FA validation.

Required: Every users will need 2FA to connect to the Devolutions Password Server instance.

Send reset email to

Administrator: Sends reset email to all users that have the Administrator check-box checked.  Note that this does NOT include those that get the privilege through belonging to a role. If using AD integration exclusively, this is not a recommended value.

Specific email: Sends reset email to the email address specified in the Specific email control.  Note that the control appears only when Specific email value is selected.

Specific email

Email address which will receive reset emails.

 

2FA supported

 

Each of our client applications will support one or multiple 2FA providers.

 

Default

 

OPTION

DESCRIPTION

Default

The Default option will only be activated when selecting Required in the 2FA usage option. If choosing more than one 2FA mode, you will then be able to select the Default 2FA method for your users.

 

Configure Users

 

If Optional is set in Two-factor usage, the users for which you require 2FA must be configured.

 

1.On the Devolutions Password Server console, click on the Users icon to configure the users that should use the 2FA if the option Optional per User is set.

 

Devolutions Password Server Console

Devolutions Password Server Console

 

2.Select the user and click on the Edit User button.

 

User and Security Management dialog

User and Security Management dialog

 

3.In General - Two factor click on Configure.

 

User management dialog

User management dialog

 

4.In the Two factor Configuration window click on Change.

 

2-Factor Configuration dialog

2-Factor Configuration dialog

 

5.In the drop down menu select the two factor configuration (we have chosen Google Authenticator for this example) and click on Save.

 

2-Factor Configuration dialog

2-Factor Configuration dialog

 

6.You can select Configure later by user or configured it immediately with your user.

 

Google Authenticator Setup dialog

Google Authenticator Setup dialog

 

Email

 

If Email or SMS Free is chosen as one of the Two Factor Supported providers, the SMTP server must be configured for the instance, and the user email address or mobile phone number must be provided in the user properties.

 

See the Server settings - Email for more information.

2FA SMS and 2FA EMail warning message

2FA SMS and 2FA EMail warning message