General information about the Two-Factor Authentication service
Two-factor authentication allows you to add an additional layer of user identity verification to increase the security of access to your services.
The service is provided in the form of licenses to use the Multifactor solution.
Multifactor's solution meets the requirements of regulators:
- is in the register of Russian software (No. 7046);
- complies with the international PCI DSS standard;
- has an FSTEC certificate (No. 5039).
Tasks to be solved
- Adding a second factor when logging into your systems using the Multifactor app;
- protecting remote access to work systems via VPN, RDP, SSH and virtual desktops (VDI);
- protection when logging into operating systems;
- Single Sign-On (SSO) capability for all enterprise and cloud services. Learn more about SSO technology in the Single Sign-On Single Point of Entry instructions in the Multifactor documentation.
Principle of operation
When activating the service, you specify the name, phone number and corporate email of the administrator who will have access to the Multifactor personal account. The administrator's email will receive a letter with a link to the personal cabinet and instructions for setting up two-factor authentication. The administrator sets up two-factor authentication according to the instructions from the e-mail.
To access your service, the user is authenticated first with a login and password, then with a second factor chosen by the administrator. Multifactor checks compliance with access policies and decides whether to allow or deny the user access to the system.
All actions are saved in the event log, which is available in your personal cabinet.
How to work with two-factor authentication
You manage user access to your system and control their actions using Multifactor Personal Area. You can find more information about the settings in your personal account in the official Multifactor documentation.
Areas of responsibility
Selectel provides licenses to use the Multifactor solution and access to the Multifactor account.
You are responsible for setting up and administering two-factor authentication in your users' personal accounts and Multifactor applications.
Cost
The cost of the service depends:
- from the number of licenses (available from 5 licenses);
- tariff - Standard or Extended. The extended tariff includes Telegram chat with technical support, personal manager, personalization of the mobile application, etc..;
- Single Sign-On (SSO) connection.
A single balance or a basic balance is used to pay for the service depending on the type of balance in the account.
The service is paid monthly. Payment for the first month is debited on the day of service activation. Further the service is prolonged automatically, the money is deducted from the balance on the first day of each following month.
What is included in the price
- access to the Multifactor personal account for the administrator;
- access of groups of users to Multifactor application according to the number of licenses and selected tariff.