General information about the Multifactor two-factor authentication service
Two-factor authentication allows adding an additional user identity verification layer to increase access security to your system.
The service is provided as licenses for using the Multifactor solution.
The Multifactor solution meets regulatory requirements:
- is included in the Russian software registry (No. 7046);
- it complies with the international PCI DSS standard;
- is FSTEC certified (No. 5039).
Tasks solved
- adding a second factor when logging into your system using the Multifactor application;
- securing remote access to the working system via VPN, RDP, SSH, and virtual desktops (VDI);
- securing logins to the operating system;
- single sign-on (SSO) capability for all corporate and cloud services. Learn more about SSO technology in the Single Sign-On guide in the Multifactor documentation.
Operating principle
When ordering the service you provide the full name, phone number, and corporate email of the administrator who will have access to the Multifactor control panel. An email with a link to the Multifactor control panel and instructions for setting up two-factor authentication will be sent to the administrator's email address. The administrator sets up two-factor authentication according to the instructions from the email.
To access your system, the user authenticates first using a login and password, and then by the second factor chosen by the administrator. Multifactor checks for compliance with access policies and makes a decision: to allow or deny user access to the system.
All actions are saved in an event log, which is available in the Multifactor control panel.
How to work with two-factor authentication
You can manage user access to your system and monitor their actions through the Multifactor control panel. More details are available in the official Multifactor documentation.
Areas of responsibility
Selectel provides licenses for using the Multifactor solution and access to the Multifactor control panel.
You are responsible for setting up and administering two-factor authentication in the Multifactor control panel and applications for your users.
Cost
The service cost depends on:
- the number of licenses (available from 5 licenses);
- plan — Standard or Extended. The Extended plan includes a Telegram chat with technical support, a personal manager, mobile app personalization, and more;
- single sign-on (SSO) connection.
To pay for the service, depending on the account balance type, a unified balance or main balance is used.
The service is billed monthly. The payment for the first month is charged on the day the service is activated. Subsequently, the service is renewed automatically, and funds are deducted from the balance on the first day of each following month.
What is included in the cost
- access to the Multifactor control panel for the administrator;
- access for user groups to the Multifactor application in accordance with the number of licenses and the selected tariff.