This page explains how you can increase security by enabling Multi-Factor Authentication (MFA) for your account and your Lansweeper Cloud site.
To increase the overall security of your Cloud site, it is possible to enable Multi-Factor Authentication (MFA). This extra security layer on top of your regular login will further protect your asset and user data stored in Cloud. For more information about how to improve security, check out 5 Features of Lansweeper Cloud that Strengthen Security.
There are two ways to implement MFA. You can enable SSO in Cloud, in which case you can use the MFA options made available by your identity provider. Alternatively, you can use the MFA configuration that is built into Cloud itself.
Enable MFA through SSO
By enabling SSO, you can log into Cloud using your preferred identity provider, Azure Active Directory for instance. You can then also enable and enforce MFA through the identity provider itself, ensuring a seamless login process.
For a detailed guide on configuring your SSO for Lansweeper Cloud, see How to set up Cloud SSO.
Enable MFA through Lansweeper Cloud
If you don't wish to enable MFA through the use of SSO, you can also enable MFA in Cloud itself. MFA can be enabled on an account level and your Cloud site can also be configured to require MFA.
This article explains how to enable MFA for your individual account, and how to enforce it for your entire site.
Enable Multi-Factor Authentication for an individual account
Before enabling MFA, make sure to have an authenticator app like Microsoft Authenticator or Google Authenticator installed on your mobile phone.
To enable MFA for the logged-in account:
- Go to the Settings > Account settings.
- Toggle Multi-Factor Authentication. A QR code will be presented that you can scan with your preferred authenticator app.
- After scanning the QR code, the account will be added to your authenticator app and a Time-based One-Time password (TOTP code) will be generated by the app.
- Fill in the TOTP code presented by the app underneath the QR code and continue.
- A new window will show your recovery key. Make sure to save the recovery key in a safe place.
MFA is now enabled for your account. In addition to your regular credentials, you will now be asked to generate a TOTP code with the authenticator app when logging in.
Alternatively, you can use your recovery key to log in. If you log in with a recovery key, a new key will be generated to replace the previous one.
Enforce Multi-Factor Authentication for all accounts linked to a site
To enforce MFA for all accounts that have access to your Cloud site:
- Go to Configuration > Site settings.
- Toggle Multi-Factor Authentication.
- Select Confirm in the pop-up window.
MFA will now be enforced for the Lansweeper Cloud site. Any user trying to access the site will be forced to enable MFA before getting access. Each user can configure MFA in their own account settings as explained earlier in this article.
Was this post helpful? Select Yes or No below!
Did you have a similar issue and a different solution? Or did you not find the information you needed? Create a post in our Community Forum for your fellow IT Heroes!
More questions? Browse our Quick Tech Solutions.
