Is it possible to require the use of 2-factor authentication to connect to a data source?
Is it possible to require the use of 2-factor authentication to connect to a data source?
Hallo!
Is it possible to require the use of 2-factor authentication (Yubikey or Google Authenticator) to be able to connect to a data source, and if so what data sources support 2-factor authentication?
I know that you can require 2-factor authentication to start the Remote Desktop Manager Client application itself, but that will not protect the data source.
If you cannot require 2-factor authentication to be able to connect to the data source, then you can simply install the Remote Desktop Manager Client application on another computer and then connect to the data source without using 2-factor authentication if you know the username and password to the data source.
A username and password can be quite easy to obtain by using a keylogger, brute force, etc. and if you cannot require 2-factor authentication to be able to connect to the data source, then using 2-factor authentication does not really add any security!
All Comments (5)
Hello,
Two factor is currently only to start the application itself.
You can require two factor be used in the data source settings, so installing another RDM client would still require two factor be used.
Adding two-factor on some data sources is already on our todo list, what data source are you using?
Best regards,
Maurice
Hallo!
Thankyou for the very quick reply!
If I am understanding you correctly, then you can set that 2-factor authentication have to be used when connecting to the data source, but you cannot tie the 2-factor authentication to the data source, i.e. you can just enable 2-factor authentication in the settings in the client with whatever Yubikey or Google Authenticator account and then the data source will let you login to the data source?
We are currently using Remote Desktop Manager Online, but we will probably switch to an internal or external MS SQL database.
Hello,
You understand correctly.
These are supposed to be added during the next quarter, but I cannot say on which data sources at this time.
Best regards,
Maurice
Hi,
This is definitively on our todo and you can expect that this summer.
David Hervieux
This is now implemented in our internal build. It will be soon in the beta release.
David Hervieux