Need Help? We are right here!
With the pace of password-based security breaches, simply using usernames and passwords to secure a Windows login is no longer an option.That’s why it has become necessary to add an additional layer of two-factor authentication security to filter out unauthorised users.
miniOrange's Windows Two-Factor Authentication solution for windows logon prevents these sorts of Password-Based breaches and adds an additional layer of security to your Microsoft Windows account login.
Enabling Windows 2FA / MFA always verifies identities before allowing access, making it more difficult for unauthorized users to gain access to your Microsoft Windows account. miniOrange Credential Provider can be installed on Microsoft Windows Client and Server operating systems to enable the Two-Factor Authentication to Remote Desktop (RDP) and local Windows Login.
Windows 2FA solution is also responsible for your User Management with a Microsoft Active Directory or an LDAP directory. With this 2FA / MFA solution, users will get easy access to the endpoints they need to access by increasing identity assurance and reducing the risk and exposure. You can also enable offline access accordingly for secure authentication. miniOrange's advanced MFA solution organizations are able to get secure access to all work applications, for all their users, from anywhere, with any device they choose.
miniOrange 2FA Credential Provider for Windows Logon and Remote Desktop (RDP) access supports following Multi-Factor Authentication (MFA) Methods:-
|miniOrange Authenticator||Soft Token|
|miniOrange Push Notification|
|Mobile Token||Google Authenticator|
|SMS||OTP Over SMS|
|SMS with Link|
|OTP Over Email|
|Email with Link|
|Call Verification||OTP Over Call|
|Hardware Token||Yubikey Hardware Token|
|Display Hardware Token|
miniOrange Credential Provider for Windows Logon and RDP Access supports both client and server operating systems.
Supported Microsoft Windows Client versions:
Supported Windows Server versions(GUI and core installs):
miniOrange offers free help through a consultation call with our System Engineers to Install or Setup Two-Factor Authentication (2FA) for Windows Logon and RDP solution in your environment with 30 days trial.
For this, you need to just send us an email at email@example.com to book a slot and we'll help you setting it up in no time.
In this step, we are going to setup your 2FA preferences, such as:
If you’re using Onpremise IDP application, please replace the IDP Server URL with base URL of your Onpremise IDP application and make sure that URL is accessible from this machine. You can also use the IP of the server where the IDP application is hosted.
Please make sure that at this point the user with same username as windows exists in miniOrange and has 2FA set up.
For instructions on setting up 2FA from Self Service Console, see this link .
Skip this step if you’re not configuring this on a domain joined machine
Note: The logo and Message on login page can be customized from the General tab in miniOrange configuration
For Deployment and Configuration using Group Policy, please see our miniOrange 2FA for Windows Logon Group Policy Documentation.
The user initiates the login to Windows or Remote Desktop Service either through a Remote Desktop Client or via the RD Web login page from his browser, after which the RADIUS request is sent from the miniOrange RD Web component installed on the target machine to the miniOrange RADIUS server, which authenticates the user via Local AD, and after successful authentication, 2-factor authentication of the user is invoked. After the user validates himself, he is granted access to the Remote Desktop Service (RDP).
Additional Resources :
Our Other Identity & Access Management Products