Google Authentificator (or 2 Factor Auth) for cms.wialon.com

This is a must in my opinion. Having a mobile phone to send an sms to with a verification code works extremely well. We need to be able to also differentiate by function to be done as well....eg if a deletion of an account is attempted even if the user is authenticated an second phone ie the company owner, gets the sms code validation. This is to protect against trusted employees doing something they should not.

It would be good to have emails also attached to certain functions that we want to monitor...Like Wolf saya even Microsoft have this :-)

Other partners please vote, if you find this function useful...

Hi there

Discussing with other valuable partners specially Wolf, It seems convenient if somewhere in CMS we can manage all granted OTP Generator smartphone applications for each account. There, we should be possible to remove any granted OTP generator.

Hi Pavel, great to hear that.

Please have in mind, that there is a little little enhanced Problem: one username, more than one real people behind that... my idea t solve this problem would be like a "subuser"...
On Loginscreen you do a normal login. If that account use 2 factor auth, there comes a little second screen where you can choose the "real people with their token generators"... like a drop downlist and than enter the token. So Wialon knows: ah ha, i need to take this users token algorithm and bind it to the SID of the login credentials.

I dont know if this is understandable? (i am not the GUI guy)

Wolf

It should be set at the user level Wolf. So there is a check box whether the use has MFA or not and then if checked what is the form of second authentication.

That is what I am saying each uses should have their own log in and each login can have 2FA so work independently of each other. You log in and you have to provide your second factor approval and if Erik logs in he has to provide his. The use of a single log in by a number of people ruins the audit trail.

The reason that MFA is used is to improve security around the log in process. Same as what a lot of banks do in regards to transactions.

You could have a single phone or dongle that you could use if you did not want to have individual validation to your own device but that sort of defeats the purpose.

This may be worth looking at https://get.cmtelecom.com/otp-apac/

Dear partners, the latest Beta should make your clients' lives more secure, as we implemented the two-factor authorization.
Read the documentation or the weblog to find details.

Attention: there is no compatibility between Beta and Stable. So after you test it in Beta, switch off the option before use Stable branch.

Hi GT

Some customers want to make users to use 2-Factor-Auth as they have restricted security rules. It would be great if we can make all users under an account to activate 2-Factor-Auth and unless that prevent them from login to system.