Configuring MFA
Configuring MFA involves setting up and managing the policies, methods, and settings for multi-factor authentication within a system. This includes enabling MFA for users, selecting the authentication factors (e.g., OTP, authenticator apps), defining fallback options, and customizing rules for specific applications or user roles. Proper configuration ensures secure access while maintaining usability.
In Visual Guard you have the option to configure for MFA on either the repository or specific application or both.
Key Points to Consider When Configuring MFA
- Choosing the Right Method
Pick the MFA methods that fit your users and security needs—email, mobile number, or an authenticator app like Microsoft Authenticator. - Defining When MFA Applies
Decide whether MFA should be required for all logins or only in specific cases, such as sensitive actions or high-privilege users. - User Information Setup
Ensure that user details like email addresses and mobile numbers are properly configured so the selected methods work smoothly. - Service Configuration
Set up the necessary services, such as your email server or SMS provider, to make sure OTPs and verification links are delivered reliably. - User Setup and Enrollment
Plan how users will complete the initial setup, especially when using an authenticator app. - Balancing Security and Usability
Apply MFA in a way that strengthens security without making the login process unnecessarily complex. - Testing the Setup
Test each MFA method from a user’s perspective to confirm everything works as expected. - Backup and Recovery
Have a fallback option in place in case users lose access to their email, mobile device, or authenticator app.
Refer to the below quick links to see the process of configuration.
Visual Guard allows you to configure MFA at the application level, giving you the flexibility to apply authentication rules based on the sensitivity and requirements of a particular application. This approach is useful when different applications require different levels of security or when you want more granular control over user access.
Configuring MFA at the repository level enables you to enforce a consistent authentication policy across all applications within the repository. This ensures a uniform level of security and simplifies management by applying the same MFA settings globally, without the need to configure each application individually.