Question - 2FA / MFA login using SMS, Google authenticator etc

Forum - Software
#1

Is it possible to configure Eramba to use 2FA/MFA (SMS Code, E-Mail, Google-Authenticator or another 2nd factor).

Best regards,
Wolfgang

#2

From my understanding of the options, you’d need to handle that on your side and use either LDAP or SAML authentication for your users (essentially having your directory service handle the multifactor before clearing the user to enter). That’s how I’ve got mine set up via AzureAD at least…

#3

Yes, we’re doing this by integrating Eramba with Keycloak.

#4

correct, the magic of saml or google outh and to some extent ldap is that using single sign on once the user validates its identity against those directories (using passwords, mfa, etc) they do not need to do it again until the session expires.

#5

Thank you very much for the helpful advice !
I will take a closer look at Keycloak.

Best regards,
Wolfgang

#6

Reach out to me if you need any tips. We ran into one small hurdle while getting Keycloak working which involved the client name.