MFA in Web GUI for first login possible?

[mwdb]

Hi,
in the past we used a remote access solution in which it was possible for the user to create a 2fa code with the first login within the webgui.  And it was also possible to reset the 2fa within the GUI.

Now we are trying to implement 2factor in NoMachine and it looks like we have to create 2fa first (we use google auth and with that the user has to login to the terminal to create the 2fa) and then we can login with password and 2fa in NoMachine.

This is not really practical for remote-only users.

Does anyone know a solution to this problem?

Thanks in advance.

[Britgirl]

In NoMachine, MFA relies on the MFA already configured in the system and it cannot be configured directly in the NoMachine GUI.

You submitted this topic in Terminal Server products, so that means you are using Linux (if you have a subscription please consider submitting a support enquiry in your customer area). I’m not sure whether you already followed the instructions in the article about 2FA here: https://kb.nomachine.com/AR12L00828 (see section 3.2. Example 2: use Google Authenticator and also Example 4). There’s something not clear in what you wrote. The correct steps for the end user should be:

1) start the nomachine connection
2) input your username and password
3) input the Authentication code (from the google authenticator on the mobile app)

Is this what your users are seeing?

[mwdb]

sorry if I have expressed myself unambiguously. Yes, we use Linux.  MFA in Linux and NoMachine works.
To pick up on your sequence, I see it like this (at least for the first login)

Open port 22 for ssh connection
Force mfa creation on first login
login with ssh and create a mfa
logout
than for compliance reason disable port 22

than…

1) start the nomachine connection

2) input your username and password

3) input the Authentication code (from the google authenticator on the mobile app)

 

i attach a picture from [edited]… that can handle mfa creation in gui…

Attachments:

1. 

   2fa.jpeg
   

[Britgirl]

Thanks for clarifying, so everything is working correctly.

In version 9 we will be including our own built-in 2FA option in the GUI. This might be of interest to you.  To use it, users will require a NoMachine account and the NoMachine app installed in order to receive push notifications, and being logged in to new NoMachine Network service within the app. NoMachine 2FA can be used to protect your NoMachine/Network account logins as well as for approving incoming connections. As I said, it will be released in version and will be available in all products.

[mwdb]

Hello, I’m glad to hear that.
Is there already an approximate release date or when the first beta might be available for testing?
Many thanks

Matthias

[Author]

Posts