Implemented 3CX Multi-Factor Authentication

[tsi3]

When will 3CX enable Multi-Factor Authentication or One-Time Passwords for either the Web Portal and/or Soft-Phone Registration?

 

[humansys]

This is critically important in this age where 3CX is often on the public Internet. We get a *lot* of attack attempts, and have seen other vendors get bitten by these drive-by attacks on 3CX.

2-FA is most important for the extension logins themselves. Where we've seen successful penetrations into extension logins is to make outbound toll-calls. 2-FA email verification for 3CXPhone installation (with a mac-address whitelist once auth successful so you only have to do it once per device), and 2-FA email verification with a mac-address or installation-ID whitelist for web login would basically solve this issue permanently.

This is how most remote access tools work - you sign in the first time and are prompted to check your email for the verification link to authorize the install. Sure, Google Authenticator or Office365 account federation would be nice, but email 2-fa is still much more secure than no 2-fa, and easy to implement, as all the pieces are already there in 3CX to make this work.

 

[Christof Lobmayer]

1+

Please implement more than one provider for MFA. We use Azure MFA it would be perfect when we could use this also for 3CX Webclient and Management Console. SSO would be very nice.

 

[UnDutchable30]

+1

 

[mcaponong]

All my servers are cloud-based and I would love to add two factor I would also like to be able to add other admins with two factor so we do not have to share passwords with everyone in the support team or make a bunch of extensions that we then have to hide from the presence and the company phonebook. We manage almost 50 cloud instances and when someone leaves the company we have to change the admin passwords on all of them. Sharing passwords is not best practice nowadays. I have customers that insist on 2 digit extensions and break out departments by the first number. With the extensions that are reserved for 3cx that does not leave a lot of extensions for me to give to my support team to log in with.

 

[HoK]

I too would like 2fa for web interface logons, especially on extensions with management portal access.

 

[WBS]

+1

 

[CageCube]

+1

 

[BillR]

+1
Please use TOTP - RFC 6238

 

[easttek]

+1

 

[Christof Lobmayer]

Maybe webauthn could be a good option.

 

[PFruh]

+1

 

[Clint Reed]

+1
Getting request to turn 2FA on on all apps, 3cx is lacking support for this feature. As this tread is very old the feature should be available by now.

 

[ChrisDavis]

Service Providers are getting attacked repeatedly. Clients using 3cx need 2 factor authentication for administration just as much as providers to the web console for management. What can we do in order to make this happen?

 

[DavisITSolutions]

Another vote for this!

 

[Phillip Pfaff]

+1

 

[jbenson]

+1

Please consider using Google Authenticator. That way people can use systems such as Authy too.

 

[Walter Santos]

+1

 

[sentrianjames]

Multi-Factor is no longer a 'nice to have' but a near stock-standard requirement in this day and age and simply cannot be ignored.

+Infinity

 

[mcsantoso]

+1 Please with Google Authenticator.

 

[edfosho]

This is a must for admins at the Management Console, but also a brilliant feature for end users using the 3CX too.