Online Help > Management > Devolutions Password Server Console > Devolutions Password Server Settings

2-Factor Authentication (2FA)

Description

 

BadgeInfo48x48

This feature is only available when using a Devolutions Password Server Corporate or Platinum license

 

The Two-factor authentication (2FA) provides unambiguous identification of users by means of the combination of two different components. These components may be something that the user knows or something that the user possess.

 

The use of two-factor authentication is used to prove one's identity is based on the premise that an unauthorized actor is unlikely to be able to supply both factors required for access. If, in an authentication attempt, at least one of the components is missing or supplied incorrectly, the user's identity is not established with sufficient certainty and then access to the asset being protected by two-factor authentication will remain blocked.

 

Two-Factor tab

Two-Factor tab

 

General

OPTION

DESCRIPTION

2FA Usage

Select the usage for Two-Factor Authentication.

None - Two-Factor Authentication is disabled.

Optional per user - Two-Factor Authentication needs to be set at user level in Users Management.

Required - All user account will be set with the Default Required 2FA.

Enable alternate 2FA

Enable the Alternate 2FA feature.

Send reset email to

Select the recipient of Reset 2FA emails.

Administrator - Recipient email address that is set in the Email administrator field of the Email tab.

Specific email - Set the recipient email address in the Specific email field.

Specific email

Email address that will receive Reset 2FA emails.

 

Supported 2FA

Google Authenticator

Yubikey

SafeNet

Duo

AuthAnvil

Email

SMS

Vasco

Azure MFA

Radius

 

Default Required 2FA

OPTION

DESCRIPTION

Default

Select the default required Two-Factor Authentication method if more than one is enabled.

 

Alternate

OPTION

DESCRIPTION

Email

Enable the Email Two-Factor Authentication as an alternate method.

Backup codes

Enable the Backup Codes Alternate Two-Factor Authentication. For more information on how to generate the backup codes list, please see Backup codes list generation.

Configure

Configure the number of backup codes.

 

clip10465

 

For more information on how to configure the 2FA on the Devolutions Password Server, please follow this link.