Strong authentication or two factor authentication

MIP
, , , ,
1

Hi, I’m new on this topic,

I need to improve authentication to the Milestone server from my component application that exports videos. I currently only use “DialogLoginForm” to authenticate users.

I know something is possible on the web client or on the mobile client.

Is it also possible from the component application or from the Smart Client?

Thanks in advance

2

You find two-step authentication in the mobile clients, web client and Smart Client. Unfortunately, there is no support for this when developing a MIP SDK standalone application.

3

Hello Kito. Can you point me to any documentation for 2FA in Smart Client? Did not found it anywhere.

We dont use 2FA at the moment, but if we enable 2FA for an account in AD, will Smart Client support it by showing additional login dialog? Maybe a screen shot of that additional login dialog available somewhere?

Regards,

Nguyen

4

This describes how to enable “Login authorization required”, meaning the user needs another user to authorize the login (2FA).

https://doc.milestonesys.com/latest/en-US/standard_features/sf_mc/sf_ui/mc_roles_security.htm?cshid=10338

5

Okay, but the administrators that approve those users don’t have any form of 2FA on their login. So this might be 2FA in a sense for low-level end users, but does not provide protection to high-level users. I hope there is a real solution soon.

6

I have been mixing some concepts here.

There is an old feature which “Login authorization required”, this functionality will make a user capable of logging in if, and only if, a second user, belonging to a role which has been granted “Authorize users” right, confirms the login.

There is a new feature called “External IDP”, which actually allows, if the external IDP supports it, what is 2FA; that a user must verify who he is on his phone device or similar.

https://doc.milestonesys.com/latest/en-US/standard_features/sf_mc/sf_systemoverview/mc_external_idpexplained.htm?Highlight=External%20IDP

I am sorry for mixing these two different concepts, when the question was first raised 3 years ago Milestone only had the older “Login authorization” functionality.

7

Thanks a lot,

Gabriele