PROOPTwo-factor authentication
2FA/MFA. A leaked password is not enough to sign in.
After the password, your employee confirms the sign-in a second way: in a phone app or with a YubiKey. We set this up for email, Windows and Remote Desktop (RDP), and for VPN as an option.
Scope
A second confirmation wherever your team signs in
We roll out 2FA/MFA on its own or as a stage of the IT Transformation, alongside backup and disk encryption.
Where we roll out 2FA/MFA
Google Workspace email
Your employee confirms sign-in to Google Workspace email and account with a YubiKey or in the Google Authenticator app.
Windows sign-in
On office computers and company servers, your employee confirms sign-in in Duo Security: on the phone or, as an option, with a code from a YubiKey.
Remote Desktop (RDP)
A connection to a computer or server in the office opens only after confirmation in Duo Security.
VPN – option
Duo Security on a VPN needs an extra server (Duo Authentication Proxy) and RADIUS configuration, so we agree on it separately.
Duo Security
How it works
A password alone does not open the account
After the password, the system asks for a second confirmation: a notification in a phone app or a touch of the key. Someone who has the password from a leak or a fake email does not have your employee’s phone or key, so the password alone will not get them in.
Can we order 2FA/MFA without the IT Transformation?
Yes. We also roll out 2FA/MFA on its own, without the other IT Transformation stages. We agree on the scope and quote after the audit.
Phone or YubiKey – which one?
A phone app is enough when the employee has the phone at hand: Google Authenticator for email, Duo for Windows and Remote Desktop. A YubiKey confirms sign-in without a phone. For Google sign-in, it will not work on a fake sign-in page. In Duo, as an option, the key enters a one-time code. We agree on the confirmation method with you after the audit.
Will you set up Duo for Google email too?
No. We protect Google Workspace email and accounts with a YubiKey or the Google Authenticator app. We roll out Duo for Windows sign-in, Remote Desktop and, as an option, VPN.
2FA/MFA
A second confirmation: phone or key
- 2FA/MFAemail, Windows, RDPthis page
- Duo Securityconfirmation on your phone
- YubiKey security keysconfirmation with a key, no phone
Contact
Let’s find where a password alone is still enough in your company
You tell us how your team signs in to email, computers and the company network. We agree on the 2FA/MFA scope and quote after the audit.
