Implemented 3CX Multi-Factor Authentication

[tsi3]

When will 3CX enable Multi-Factor Authentication or One-Time Passwords for either the Web Portal and/or Soft-Phone Registration?

 

[simplyhandled]

+1 much needed for compliancy purposes.

 

[gweijkamp]

+1

In this day and age it must be mandatory to use two factor authentication.

 

[Paul.siebenaller]

We need this for compliancy purposes also

 

[ABSH]

You don't use 3CX if you have compliance requirements. Beware any scheduled report is available publically. Sure they randomise the link but it fails even the basic governace requirements. That is of course if you can get around the MFA limitation.

 

[ForTheLoveOf3CX]

+1

 

[rc179]

+1 3CX, got 6 minutes? At least allow DUO's 2FA integration as an easy first step?
https://duo.com/resources/videos/set-up-two-factor-authentication-with-duo-s-web-sdk

If 3cx supported LDAP or RADIUS we could use DUO's LDAP Proxy to get 2FA.

 

[Bentech Computers]

+1 for MFA! Sick of seeing IP blacklists from brute force attempts on the management console. Cloud based and awkward to restrict source IP as techs might be on the road when dialling in etc

 

[regedit]

+1

 

[PhilK]

+1
Please use a 2FA Method where I don't have to look for the OTP manually by searching the app. I don't know how it is called, but it would be nice to have a method with a push notification like Microsoft uses it, where I only have to accept the login.

 

[Shigeru KAWAGUCHI]

+1

 

[cobaltit]

+1
Please use a 2FA Method where I don't have to look for the OTP manually by searching the app. I don't know how it is called, but it would be nice to have a method with a push notification like Microsoft uses it, where I only have to accept the login.

Maybe they can bake it into the mobile client.

 

[VSC]

+1

 

[Anthony DiMichele]

2FA is a must. We should have 2FA on the partner portal as well.

 

[VSC]

+1

 

[cobaltit]

2FA is a must. We should have 2FA on the partner portal as well.

So does this mean you aren't currently using 3CX? Because if you are, then clearly it's not a must

In all seriousness though, yes 2FA should be on everything and v18 will improve upon that by adding SSO.

 

[N_G]

@Anthony DiMichele Michele - You have it with SSO?

V18 will bring SSO with Microsoft and Google. So you can do 2FA if you have Microsoft 365 or Google Gsuite. Even if you just run Active Directory, you can sync to Azure AD in the cloud (free of charge) and do SSO from there. So with this you have 2FA. Maybe not if you are running Novell Network Directory or something but i think thats really the exception