MFA for webclient

[services5]

Hi , is there any plan for MFA and webclient , insurance company are now forcing customers to enabled those policies ( email ,remote access , VPN ), even for remote management this should now be enabled by default , this is no longer a nice to have feature , everyone are now implementing this or will during the next year

 

[CentrexJ]

When paired with azure ad you can do this easily.

 

[NicholasP_3CX]

When you have integrated with Microsoft 365 or Google, you will be given the option to login through these platforms and use their MFA capabilities.

You will see the following on your login screen.

 

[services5]

Admin account protected ? This forced us to migrate and integrate all PBX and Users with either Microsoft or Google , don't want this , some are hosted with us but we don't necessarily manage their email and AD

 

[Evolute IT]

When you have integrated with Microsoft 365 or Google, you will be given the option to login through these platforms and use their MFA capabilities.

You will see the following on your login screen.

View attachment 30254

I'll be honest. This answer was good a year ago.

Not anymore.

A simple export of the users, or someone accessing anything in the server could allow them to grab any WebClient passwords and then enter any accounts, SSO or not. Even with a strong password. Therefore, 2FA is absolutely needed to protect accounts from hacking.

Like, seriously, this is the kind of thing that made some customers leave us in the past year because it wasn't up to their security policies (2FA everywhere).