2 factor authentication not checked
When I add 2 factor authentication (2FA) to my user account on a datasource I can still login to the datasource using only my password on other computers. I think RDM should check 2FA as part of my login regardless of the computer I use to connect to the datasource. Why is this not the case?
Bas
P.S. to be precise: I'm referring here to the new (v11) functionality to add 2FA to users on a datasource and not the older functionality to add 2FA to a client installation.
All Comments (8)
Hello,
Do you use DVLS or the SQL Server data source only?
David Hervieux
I have no idea what DVLS is. We use the 'Devolutions Online Database' (DVOD?)
Bas
Ok,
That's why you have to configure it on each machine. This is not saved on the server. We don't have the server side 2FA for now. This is on our todo list for Devolutions Online Database.
David Hervieux
Which 2FA do you want to use?
David Hervieux
Ok, if you don't have server side 2FA, what is the big difference between the 'new 2FA' (configured on a datasource) and the 'old 2FA' (configured per client)?
Also, it seems from a security perspective this type of 2FA is pretty much worthless (only helps to protect offline data) because someone can easily do a fresh install of RDM and bypass 2FA that way. Am I correct in that?
Bas
(currently using Google Authenticator)
Hello,
You are right the best 2FA is the server side one which is now only supported by DVLS (Devolutions Server). The one that you use is configured per data source instead of the whole client. This means that you could have a basic data source without the 2FA. The goal of this authentication is to avoid a security issue if your workstation is compromised but this does not resolve all the problems.
The Devolutions Online Database 2FA will be more secure for sure and it will be available in the next major upgrade.
David Hervieux
We are also experiencing pretty bad performance with the Devolutions Online Database (presumably caused by the database being hosted on Azure US and we're in Europe). If we switch from the Devolutions Online Database to Azure SQL (so we can choose Europe) will this support 2FA soon as well?
Any idea on timings for this?
Bas
Hi,
It's not supported for SQL Server and it will be difficult to add. I think that we would need to create an Server Edition that you can install on Azure or offer a Cloud in Europe.
David Hervieux