Implemented 3CX Multi-Factor Authentication

[tsi3]

When will 3CX enable Multi-Factor Authentication or One-Time Passwords for either the Web Portal and/or Soft-Phone Registration?

 

[Silly English Kniggit]

We've also just had a client ask for this. Specifically they'd like to use Google 2FA which they already have deployed for other things.

 

[narkumas]

+1

 

[techclarity]

+1

 

[D Bedford]

Voted. Adding 2FA would be a great boost to GDPR compliance (securing our phone system web logins / client registrations).

 

[Tifoso]

vote +1

 

[Frank86]

+1

 

[Aytek Aydogan]

me too

 

[electronic7]

I suggest allowing SSO to help with this as well

 

[Brad Allison]

2FA would be a great benefit to security.

 

[the60]

+1

 

[jeroendebruijn]

I think it would be a great idea, although thes is some consideration:

• Multiple support engineers need access to the management console this is possible but not very handy with google 2FA
• Likewise, if you only have one phone with the 2FA code generator, you still need to be able to access the console if that phone dies.
• I also think there should be distinctive 2FA uses:
  • Management console access
    more ore less obliged or at least strongly recommended
    To be asked for at the final stages of the PBX installation
  • webclient access
    to be turned on by the extension use themselves
    Administrator should be able to overrule if this considers a general extension
    (reception, helpdesks, ect)
  • smartphone client provisioning 2FA (I would personally dislike this too much to turn it on, but i could see strict ISO 9001 compliant companies having a use for it.

 

[Benoit C.]

+1

 

[TP_]

+1

 

[Toufic Saghbini]

+1, especially that we started deploying 3cx on cloud servers

 

[poynter.net]

+1 Implement SAML and OAuth for management console and webclient...SSO for all users and the provider handles 2FA.

Just make sure it works on Linux as well as Windows

 

[poynter.net]

@Nick Galea

SAML is now becoming a must have at enterprise level, there is definitely a gap with authentication now: https://www.3cx.com/blog/docs/import-active-directory/

 

[Christian Bradley]

+1
Do we know yet if this is coming into force?

 

[techclarity]

+1 for SAML

 

[accentlogic]

With the great new integration to Office 365 in v16, and soon Google Apps as well, it's imperative that MFA/2FA for those platforms is supported. Out testing to integrate or even import contacts from O365 fails on accounts with MFA enabled.