Forum / Remote Desktop Manager - Feature Request

Datasource - require 2 factor authentication

  • Create an Issue
  • Cancel

So, we've been using RDM for a while, with a SQL database. Our setup we need to be able to use offline cached mode since there are quite a few cases were we end up somewhere physically that we can't reach back to SQL. The question came up about how we can handle offline caching, and someone who leaves the company. If they leave, they have access to the offline cache for 20 days (we can't always get a laptop back for remote employee's right away). The perfect answer to address this is through the 2 factor authentication, provided I can require it to connect to the data source.

In my ideal world, if you want to connect and pull the connection and credentials down from SQL you need to have 2 factor turned on. If you turn it off, you shouldn't be able to use the cached DB unless you turn it back on.

This gives us the ability to control access, and handle that situtation through a remote wipe of the authenticator device (think like a iPhone or Android) with the security that we want.

I've seen no way to mandate that this is checked when connecting to the datasource, so that's a feature i'd love to see. I can set it up that way before it goes to someone, but they have access to the options to turn it off, it's not so useful to us.

Any chance to get this added in? If it's already existing and i've missed it, please let me know. It's a great setup to have.

Clock6 yrs

Hi,
I will think about it but I'm not sure how easy this would be to add. For now what we have is a configurable expiration time bomb. You could set it to 3 days instead of 20 days.

David Hervieux

signaturesignature

Clock6 yrs

We would also like to see feature: requiring 2-factor authentication at the data source-level so that users could only connect if they are using Google Authenticator in addition to their username/pass.

Clock5 yrs

Good point!

David Hervieux

signaturesignature

Clock5 yrs

Any thoughts on this one? is it possibly a feature that will be added?

Clock5 yrs

I have a feature request implemented. I can't give you a specific time frame but I will do my best to include this in RDM 9.5. It will be a policy that will not allow you to open the data source if GA is not configured on your machine.

David Hervieux

signaturesignature

Clock5 yrs

I wanted to re-upvote requiring 2-factor authentication at the data source level. Thanks!

Clock5 yrs

matthooper wrote:

I wanted to re-upvote requiring 2-factor authentication at the data source level. Thanks!

Nevermind, I see its in 10.0.0.0!
"Added a policy in the data source settings to force Google Authenticator"


Thanks for making this change

Clock5 yrs

ok, could you add antoher two-factor authentication provider? we are very fond of duosecurity lately. https://www.duosecurity.com/

Clock4 yrs

I will take a look at it for the next major release.

David Hervieux

signaturesignature

Clock4 yrs

Hi,
We should have Duo in beta soon.

Regards

David Hervieux

signaturesignature

Clock4 yrs

Hi,

Can you add the Azure Multi Factor Authentication feature to Remote Desktop Manager?

Thank you, Best Regards.

Clock4 yrs

Could you give me more Details about the Azure Multi Factor? Perhaps an link to a SDK or some documentation?

David Hervieux

signaturesignature

Clock4 yrs

Hi,
I've found it. I will enter a feature request.

David Hervieux

signaturesignature

Clock4 yrs

Hi,

here some of the links

https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-sdk/
https://azure.microsoft.com/tr-tr/documentation/articles/multi-factor-authentication-sdk/
http://blogs.technet.com/b/ad/archive/2013/06/21/building-multi-factor-authentication-into-your-applications-using-the-sdk.aspx
http://sabbour.me/securing-asp-net-logins-with-azure-multi-factor-authentication/
https://channel9.msdn.com/Blogs/Windows-Azure/WA-Multi-Factor-Authentication-SDK

Thank you.

Clock4 yrs

any news about Azure Multi Factor Authentication?

Thank you

Clock4 yrs

We setup our testing environment yesterday for that and Martin is already working on it. This should be available soon in the beta.

David Hervieux

signaturesignature

Clock4 yrs

Thank you so much

Clock4 yrs

any news about Azure Multi Factor Authentication?

Thank you

Clock4 yrs