Setting up Two-Factor Authentication (TFA) - Google Authenticator6 minutes to read
Google Authenticator is a software-based authentication token developed by Google. The token provides an authenticator, which is a six digit number users must enter as the second factor of authentication. You need to install the Google Authenticator app on your smart phone or tablet devices. It generates a six-digit number, which changes every 30 seconds. With the app, you don’t have to wait a few seconds to receive a text message. Here’s how to set up and use the Google Authenticator app with your Google account, along with a few other well-known sites. Sequence of EventsFollowing is the sequence of events involved in using Google Authenticator as the second factor:
Steps Required
1. Configuring TFA in PAM360
2. Enforcing TFA for Required Users
3. Connecting to PAM360 Web Interface when TFA via Google Authenticator is EnabledPre-requisiteTo make use of google authenticator as the second factor of authentication, you should first install Google Authenticator app in your smart phone or tablet. Google officially supports Android, iPhone, iPad, iPod Touch and BlackBerry devices. Detailed instructions to install the Google Authenticator app is available in Google's website. Connecting to PAM360 web interfaceThe users for whom TFA is enabled, will have to authenticate twice successively. As explained above, the first level of authentication will be through the usual authentication. That is, the users have to authenticate through PAM360's local authentication or AD/Microsoft Entra ID/LDAP authentication. If the administrator has chosen the TFA option "Google Authenticator", the TFA will happen as detailed below:
Troubleshooting TipAs mentioned earlier, the Google Authenticator is associated with your PAM360 account. If you ever lose your mobile device/tablet OR if you accidentally delete the Google Authenticator app on your device, you will still be able to get tokens to log in to PAM360. In such scenarios, just click the link "Have trouble using Google Authenticator?" in the PAM360 login screen. You will be prompted to enter your PAM360 username and the email address associated with PAM360. You will receive instructions to get Google Authenticator again.
| |