View all users with MFA enabled

Hello John,

Thank you for reaching out to us regarding this,

Unfortunately, to my knowledge, there would be no way to confirm this,

That being said, If you're looking to ensure the users connecting to your data source have the MFA configured, I'm wondering if the option "Force data source multi-factor configuration" may be helpful in your case? You can find it under "Administration" -> "System Settings" -> "Security Settings".

Let me know,

Best regards,

Hello,

In addition to what my colleague mentioned, we checked and it should be possible to add a column to show if the user currently has an MFA configured. I have opened a ticket for this.

Regards,

We have the same wish as John, since we cannot force all users to enable TOTP/MFA systemwide. Some of our service accounts connect by powershell, which don't work anymore after forcing TOTP.

Hopefully this is somethng which can be added on short term?


Kind Regards,
Jeroen Griede

Hello Jeroen,

Just to confirm, you're talking about adding a column to see the MFA status for your users, in the user management window, is that correct? If so, I will check if we can increase the priority.

Regards,

Hi Hubert,

Correct, for the TOTP validation for RDM itself, which can be set under Security -> 2-Factor Authentication -> Require a TOTP validation.


Kind Regards,
Jeroen Griede

Jeroen, do you mean the options located in File > Options > Security?



Unfortunately for this configuration, it wouldn't be possible to add a column on this. The reason for that is because these configurations in File>Options are saved locally on the machine, and are not saved in the database. They are meant for locking RDM, not for logging into the database.


There is an MFA configuration that is used to validate the connection to the database, and is stored in it. A user can configure this MFA by going in File > My Account Settings and clicking on Data Source MFA:


You should be able to force your users to configure this MFA by configuring the option "force data source multi-factor configuration" in the system settings:


This data source MFA configuration is what we were aiming to add as a column, as this is actually saved in the database.

Regards,

Hello,

Letting you know that a column "Has MFA Configured" has been added to the user management window for SQL Server and will be available in our next minor update.


Regards,