Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

3CX Multi-Factor Authentication

Discussion in 'Ideas' started by tsi3, Aug 31, 2017.

3CX Multi-Factor Authentication 5 5 36votes
5/5, 36 votes

  1. tsi3

    Joined:
    Jul 13, 2010
    Messages:
    1
    Likes Received:
    4
    When will 3CX enable Multi-Factor Authentication or One-Time Passwords for either the Web Portal and/or Soft-Phone Registration?
     
  2. Silly English Kniggit

    Joined:
    Sep 13, 2017
    Messages:
    220
    Likes Received:
    89
    We've also just had a client ask for this. Specifically they'd like to use Google 2FA which they already have deployed for other things.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. narkumas

    narkumas New Member

    Joined:
    Nov 28, 2016
    Messages:
    227
    Likes Received:
    29
  4. techclarity

    techclarity New Member

    Joined:
    Nov 14, 2014
    Messages:
    109
    Likes Received:
    50
  5. D Bedford

    Joined:
    Oct 17, 2017
    Messages:
    21
    Likes Received:
    8
    Voted. Adding 2FA would be a great boost to GDPR compliance (securing our phone system web logins / client registrations).
     
  6. Tifoso

    Joined:
    Oct 17, 2017
    Messages:
    58
    Likes Received:
    11
  7. Frank86

    Frank86 New Member

    Joined:
    Jan 18, 2018
    Messages:
    118
    Likes Received:
    4
  8. Aytek Aydogan

    Joined:
    Jul 2, 2017
    Messages:
    5
    Likes Received:
    1
  9. electronic7

    Joined:
    Apr 28, 2015
    Messages:
    4
    Likes Received:
    1
    I suggest allowing SSO to help with this as well
     
  10. Brad Allison

    Joined:
    Jun 7, 2017
    Messages:
    67
    Likes Received:
    20
    2FA would be a great benefit to security.
     
  11. the60

    the60 New Member

    Joined:
    Oct 21, 2011
    Messages:
    117
    Likes Received:
    61
    +1
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. jeroendebruijn

    Joined:
    Nov 9, 2015
    Messages:
    35
    Likes Received:
    18
    I think it would be a great idea, although thes is some consideration:
    • Multiple support engineers need access to the management console this is possible but not very handy with google 2FA
    • Likewise, if you only have one phone with the 2FA code generator, you still need to be able to access the console if that phone dies.
    • I also think there should be distinctive 2FA uses:
      • Management console access
        more ore less obliged or at least strongly recommended
        To be asked for at the final stages of the PBX installation
      • webclient access
        to be turned on by the extension use themselves
        Administrator should be able to overrule if this considers a general extension
        (reception, helpdesks, ect)
      • smartphone client provisioning 2FA (I would personally dislike this too much to turn it on, but i could see strict ISO 9001 compliant companies having a use for it.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    D Bedford likes this.
  13. Benoit C.

    Joined:
    Apr 20, 2018
    Messages:
    1
    Likes Received:
    0
  14. TP_

    TP_

    Joined:
    May 15, 2018
    Messages:
    47
    Likes Received:
    4
  15. Toufic Saghbini

    Joined:
    May 2, 2018
    Messages:
    5
    Likes Received:
    0
    +1, especially that we started deploying 3cx on cloud servers
     
  16. poynter.net

    Joined:
    Aug 26, 2009
    Messages:
    36
    Likes Received:
    5
    +1 Implement SAML and OAuth for management console and webclient...SSO for all users and the provider handles 2FA.

    Just make sure it works on Linux as well as Windows :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. poynter.net

    Joined:
    Aug 26, 2009
    Messages:
    36
    Likes Received:
    5
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. Christian Bradley

    Joined:
    Oct 17, 2018
    Messages:
    1
    Likes Received:
    0
    +1
    Do we know yet if this is coming into force?
     
  19. techclarity

    techclarity New Member

    Joined:
    Nov 14, 2014
    Messages:
    109
    Likes Received:
    50
    +1 for SAML
     
  20. accentlogic

    accentlogic New Member

    Joined:
    Nov 14, 2013
    Messages:
    181
    Likes Received:
    77
    With the great new integration to Office 365 in v16, and soon Google Apps as well, it's imperative that MFA/2FA for those platforms is supported. Out testing to integrate or even import contacts from O365 fails on accounts with MFA enabled.