{"id":11730,"date":"2021-06-24T16:45:39","date_gmt":"2021-06-24T15:45:39","guid":{"rendered":"https:\/\/www.logonbox.com\/content\/?page_id=11730"},"modified":"2023-09-28T11:43:23","modified_gmt":"2023-09-28T10:43:23","slug":"multi-factor-authentication","status":"publish","type":"page","link":"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/","title":{"rendered":"Two-Factor Authentication (2FA) Support"},"content":{"rendered":"

Two-factor Authentication (2FA)<\/h1>

The password alone is not enough to identify a user in the twenty-first century. LogonBox products have extensive support for many types of authentication to ensure that your user’s identities are confirmed using a mechanism in line with your security policies.<\/h5><\/div>
\"Accenture<\/div><\/div><\/div><\/div>

Supported 2FA Factors<\/h2><\/div>
\"duo<\/td>\"saml<\/td>\"RSA<\/td>\"yubikey<\/td>\"microsoft-authenticator\"<\/td>\"google<\/td><\/tr>

Duo Security<\/p><\/td>

SAML Authentication<\/p><\/td>

RSA SecureID<\/p><\/td>

Yubikey Security<\/p><\/td>

Microsoft Authenticator<\/p><\/td>

Google Authenticator<\/p><\/td><\/tr>

\"radius<\/td>\"SMS<\/td>\"LogonBox<\/td>\"webauthn<\/td>\"email<\/td>\"q&a<\/td><\/tr>

Radius Authentication<\/p><\/td>

SMS Authentication<\/p><\/td>

LogonBox Authenticator<\/a><\/p><\/td>

WebAuthn Authentication<\/p><\/td>

Email Authentication<\/p><\/td>

Secure Q&A<\/p><\/td><\/tr><\/tbody><\/table><\/div><\/div><\/div><\/div>

How does each 2FA option stack up?<\/h5>

LogonBox product’s support many authentication types. Here we provide not only the list of supported authentication factors, but provide our opinion on the security, administration and ease of use of each type of authentication.<\/p><\/div><\/div>

Yubico<\/a><\/h5>
USB Hardware Device<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>

USB security keys that provide passwordless strong authentication for two-factor and multi-factor authentication.<\/p>

“A very strong second-factor with good compatibility; requires up-front investment and distribution of hardware keys to end-users.”<\/em><\/small><\/p><\/div><\/div><\/div>

WebAuthn<\/a><\/h5>
Browser + USB Device<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>

WebAuthn is a web standard and protocol that enables strong authentication of web applications through the use of public-key cryptography on hardware tokens.<\/p>

“Another very strong second-factor; up-front investment and distribution of hardware required with slightly more complex configuration for the user when compared to direct Yubikey support.”<\/em><\/small><\/p><\/div><\/div><\/div>

LogonBox Authenticator<\/a><\/h5>
Mobile Application<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>

LogonBox’s own 2FA solution that provides a secure log in option using modern public-key cryptography and a unique swipe me in action.<\/p>

“Included as part of any LogonBox product; Flexible configuration with an option to require biometric response.”<\/em><\/small><\/p><\/div><\/div><\/div><\/div>

Q&A<\/h5>
User Secret<\/h6>
Security<\/small><\/div>
<\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>

Setup user authentication by requesting an answer from a set of pre-defined questions that they have previously provided answers to.<\/p>

“A tried and tested solution but not the most secure method available and subject to the usual problems associated with user secrets and passwords.”<\/em><\/small><\/p><\/div><\/div><\/div>

Email OTP<\/h5>
Trusted Message<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>

Email the user a random one-time password to their primary or secondary email account.<\/p>

“A good compromise between administration and security. Not a suitable solution if the users email account is protected by their Active Directory password.”<\/em><\/small><\/p><\/div><\/div><\/div>

SMS OTP<\/h5>
Trusted Message<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>

Send an SMS message to the user’s mobile phone containing a random one-time password.<\/p>

“A great way of delivering one-time passwords but can be subject to mobile network issues.”<\/em><\/small><\/p><\/div><\/div><\/div><\/div>

Duo<\/a><\/h5>
Mobile Application<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>

If you have already invested in an existing 2FA solution like Duo, you can uiltise this in any of our authentication flows.<\/p>

“A great solution for when you have already invested time and effort to deploy with other services.”<\/em><\/small><\/p><\/div><\/div><\/div>

Google Authenticator<\/a><\/h5>
Mobile Application<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>

The Google Authenticator mobile app uses the TOTP protocol to generate time-based one-time passwords.<\/p>

“Requires no network communication during authentication, just read the current password and enter at the prompt.”<\/em><\/small><\/p><\/div><\/div><\/div>

Microsoft Authenticator<\/a><\/h5>
Mobile Application<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>

The Microsoft Authenticator mobile app uses the TOTP protocol to generate time-based one-time passwords.<\/p>

“Another great TOTP solution compatible with Google Authenticator.”<\/em><\/small><\/p><\/div><\/div><\/div><\/div>

PIN<\/h5>
User Secret<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>

A small numeric password of fixed length that the user would present. This would not be typically used on its own, but in-front of another authentication factor.<\/p>

“In the end a PIN is just a numeric password. Easy for users but don’t use without an additional factor.”<\/em><\/small><\/p><\/div><\/div><\/div>

reCaptcha<\/h5>
Mobile Application<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>

Google’s “are you human” authenticator which presents a “I’m not a Robot” and other prompts to ensure users are real users and not bots.<\/p>

“Not really an authentication factor, but certainly helps to ensure bots and scripts are not trying to brute force your server.”<\/em><\/small><\/p><\/div><\/div><\/div>

RADIUS<\/h5>
External Authentication<\/h6>
Security<\/small><\/div>
<\/i><\/i><\/i><\/i><\/small><\/div><\/div>
Administration<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>
Usability<\/small><\/div>
<\/i><\/i><\/i><\/small><\/div><\/div>

Authenticate against any server supporting the RADIUS protocol. This legacy protocol lives on and still has some relevance when used correctly.<\/p>

“When used to support real hardware tokens like RSA SecurID it’s a very secure factor.”<\/em><\/small><\/p><\/div><\/div><\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Two-factor Authentication (2FA)The password alone is not enough to identify a user in the twenty-first century. LogonBox products have extensive support for many types of authentication to ensure that your user’s identities are confirmed using a mechanism in line with your security policies.Supported 2FA FactorsDuo SecuritySAML AuthenticationRSA SecureIDYubikey SecurityMicrosoft AuthenticatorGoogle AuthenticatorRadius AuthenticationSMS AuthenticationLogonBox AuthenticatorWebAuthn AuthenticationEmail […]<\/p>\n

Read More…<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/empty.php","meta":[],"yoast_head":"\nTwo-Factor Authentication (2FA) Support | LogonBox<\/title>\n<meta name=\"description\" content=\"There are a range of systems which support 2FA and its importance in the digital world. We compare them here to determine which is best for you.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Two-Factor Authentication (2FA) Support | LogonBox\" \/>\n<meta property=\"og:description\" content=\"There are a range of systems which support 2FA and its importance in the digital world. We compare them here to determine which is best for you.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/\" \/>\n<meta property=\"og:site_name\" content=\"LogonBox\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-28T10:43:23+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/\",\"url\":\"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/\",\"name\":\"Two-Factor Authentication (2FA) Support | LogonBox\",\"isPartOf\":{\"@id\":\"https:\/\/www.logonbox.com\/content\/#website\"},\"datePublished\":\"2021-06-24T15:45:39+00:00\",\"dateModified\":\"2023-09-28T10:43:23+00:00\",\"description\":\"There are a range of systems which support 2FA and its importance in the digital world. We compare them here to determine which is best for you.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.logonbox.com\/content\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Two-Factor Authentication (2FA) Support\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.logonbox.com\/content\/#website\",\"url\":\"https:\/\/www.logonbox.com\/content\/\",\"name\":\"LogonBox\",\"description\":\"Identity & Authentication Solutions\",\"publisher\":{\"@id\":\"https:\/\/www.logonbox.com\/content\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.logonbox.com\/content\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.logonbox.com\/content\/#organization\",\"name\":\"LogonBox Ltd.\",\"url\":\"https:\/\/www.logonbox.com\/content\/\",\"sameAs\":[],\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.logonbox.com\/content\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.logonbox.com\/content\/wp-content\/uploads\/2021\/02\/logonbox-logo.gif\",\"contentUrl\":\"https:\/\/www.logonbox.com\/content\/wp-content\/uploads\/2021\/02\/logonbox-logo.gif\",\"width\":1000,\"height\":185,\"caption\":\"LogonBox Ltd.\"},\"image\":{\"@id\":\"https:\/\/www.logonbox.com\/content\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Two-Factor Authentication (2FA) Support | LogonBox","description":"There are a range of systems which support 2FA and its importance in the digital world. We compare them here to determine which is best for you.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/","og_locale":"en_GB","og_type":"article","og_title":"Two-Factor Authentication (2FA) Support | LogonBox","og_description":"There are a range of systems which support 2FA and its importance in the digital world. We compare them here to determine which is best for you.","og_url":"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/","og_site_name":"LogonBox","article_modified_time":"2023-09-28T10:43:23+00:00","twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/","url":"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/","name":"Two-Factor Authentication (2FA) Support | LogonBox","isPartOf":{"@id":"https:\/\/www.logonbox.com\/content\/#website"},"datePublished":"2021-06-24T15:45:39+00:00","dateModified":"2023-09-28T10:43:23+00:00","description":"There are a range of systems which support 2FA and its importance in the digital world. We compare them here to determine which is best for you.","breadcrumb":{"@id":"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.logonbox.com\/content\/two-factor-authentication\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.logonbox.com\/content\/two-factor-authentication\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.logonbox.com\/content\/"},{"@type":"ListItem","position":2,"name":"Two-Factor Authentication (2FA) Support"}]},{"@type":"WebSite","@id":"https:\/\/www.logonbox.com\/content\/#website","url":"https:\/\/www.logonbox.com\/content\/","name":"LogonBox","description":"Identity & Authentication Solutions","publisher":{"@id":"https:\/\/www.logonbox.com\/content\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.logonbox.com\/content\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.logonbox.com\/content\/#organization","name":"LogonBox Ltd.","url":"https:\/\/www.logonbox.com\/content\/","sameAs":[],"logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.logonbox.com\/content\/#\/schema\/logo\/image\/","url":"https:\/\/www.logonbox.com\/content\/wp-content\/uploads\/2021\/02\/logonbox-logo.gif","contentUrl":"https:\/\/www.logonbox.com\/content\/wp-content\/uploads\/2021\/02\/logonbox-logo.gif","width":1000,"height":185,"caption":"LogonBox Ltd."},"image":{"@id":"https:\/\/www.logonbox.com\/content\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/pages\/11730"}],"collection":[{"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/comments?post=11730"}],"version-history":[{"count":106,"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/pages\/11730\/revisions"}],"predecessor-version":[{"id":13632,"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/pages\/11730\/revisions\/13632"}],"wp:attachment":[{"href":"https:\/\/www.logonbox.com\/content\/wp-json\/wp\/v2\/media?parent=11730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}