Multi-factor Authentication
Is there a way to enable multi-factor authentication (MFA)? If not directly through Pyramid, is there third party tools to provide something like this? It is becoming a government mandate and will be required, in the future, for us.
4 replies
-
At least it's possible by using another authentication provider such as Azure AD.
-
Hi Robert,
You can use Azure Proxy in combination with windows authentication. You can then setup MFA on the Azure Proxy.(this is a really good option if you already use AD authentication as apart from setting Pyramid to use windows authentication on login there is not much else that needs to be configured in Pyramid) You can also use SAML for your authentication in Pyramid. SAML providers such as Azure also allow you to configure MFA. For mobile access Pyramid has MFA built in using device ID check, you can read more about that here
-
MFA is somewhat unrelated to Pyramid.
You need to find an MFA solution. It should then deliver an authentication 'response' that Pyramid understands - like LDAP, Active Directory, SAML etc. If you find a "response" we don't support, then you can request to have it added as an authentication provider.
As Daniel describes, Azure AD includes an MFA solution. It presents to Pyramid as and AD provider.
-
MFA was added as a built-in option for 2020.20. It will work on any system where the user logs into Pyramid (as in, not via SSO).