Looking for Non-Cloud MFA/2FA Solutions for My Company
Asked by
TechVoyager42
I'm searching for a multi-factor authentication (MFA) or two-factor authentication (2FA) solution that doesn't rely on cloud services, as my workplace has a strict policy against using anything in the cloud. We're a small company located in the EU, and I'm curious if anyone has experience or ideas on how to implement such a solution. I'm considering options like YubiKey, but I don't have any personal experience with them. Any insights or suggestions would be greatly appreciated! Cheers!
Answers
A solid option is to use the classic Time-Based One-Time Password (TOTP) method, which doesn't require any cloud services. You only need an app that generates codes based on a shared secret and synchronized clocks.
Reply to this answer
If you're already using Active Directory, look into ADFS for OIDC supporting apps, although keep in mind it primarily supports smartcards. Open-source alternatives like Keycloak or Authentik might also be worth exploring.
Reply to this answer
For a practical solution, we're using ESET Secure Authentication, which is affordable and works well. It integrates with Exchange, RDS, and Windows machines, and can support TOTP along with mobile apps like HOTP.
Reply to this answer
You should clarify what you're trying to protect with MFA, as that will affect the best options for you. For instance, if you're looking to secure login into an Active Directory (AD) domain, that’s a significant factor to consider.
Reply to this answer
If you're considering hardware solutions, buying YubiKeys for everyone is a great move. That's what we did since we don't provide company mobiles, and it has really streamlined our access.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions