• Workspace

workspace
  1. Help Center
  2. Workspace
  3. User Guide
  4. Operation Guide (Administrators)
  5. Configuring Two-Factor Authentication

Configuring Two-Factor Authentication

Scenario

Two-factor authentication indicates the Domain account + Dynamic password authentication.

In the scenario where Workspace is connected to an existing AD server, you can enable two-factor authentication as required to enhance system security.

NOTE:

Two-factor authentication only applies to the scenario where dynamic password authentication using the customer's Radius authentication server based on the standard Radius protocol is required.

Procedure

Enabling dual-factor authentication

  1. Log in to the Workspace management console.
  2. Click Dashboard.

    The Dashboard page is displayed.

  3. Click Modify next to Two-factor authentication.

    The Two-factor authentication dialog box is displayed.

  4. Click to enable two-factor authentication and set the following parameters.

    Table 1 Parameters to be configured

    Parameter

    Description

    Example Value

    Radius server address

    The Radius server is a two-factor authentication server used for dynamic password authentication based on the Radius protocol.

    Indicates the IP address of the Radius server.

    127.0.0.1

    Port

    Indicates the port used for communication between the Radius server and the Web login page of end users.

    Default: 1812

    Shared secret code

    Indicates the password used for authentication between the Radius server and client.

    -

    Confirm shared secret code

    Enter the shared password again.

    -

    Authentication type

    Indicates the password authentication protocol.

    Only PAP is supported.

    Server timeout(in seconds)

    1 to 999.

    Configure it based on latencies of the Web login page of end users and Radius server.

    Recommended value: 10

    Max retries

    1 to 999.

    Indicates the maximum number of retries upon connection failure between the Web login page of end users and Radius server.

    Recommended value: 2

  5. Click OK.

    Two-factor authentication is enabled.

Disabling dual-factor authentication

  1. Log in to the Workspace management console.
  2. Click Dashboard.

    The Dashboard page is displayed.

  3. Click Modify next to Two-factor authentication.

    The Two-factor authentication dialog box is displayed.

  4. Click to disable two-factor authentication.
  5. Click OK.

    Two-factor authentication is disabled.