two factor authentication

[DCIM_Support]

I previously asked the question if the DCE/DCO/Struxureware Portal could be CAC enabled and was told that they could not be CAC enabled..  However, I received some information from our PKI team which indicated that there was some Enterprise Management Suite software for the DCE/DCO/Portal that can be CAC/2 Factor Enabled and wanted to verify whether this information is correct or not.   Is there some Enterprise Management software that allows this?  Also, wanted to verify that the Netbotz, sensors, and PDU's can not be CAC/2 factor enabled.

(CID:129409851)

[DCIM_Support]

Hi Krista,

For NetBotz and DCE, I know of nothing that can specifically used for 2 factor authentication...at least nothing that is officially supported or that we recommend as an integration with these products. I know there is an enhancement request for such a feature in the system for DCE and I'll add your post to that.

I don't know about DCO or portal and will defer to someone that knows more in that area but I haven't heard of anything there either.

Steve

(CID:129409907)

[DCIM_Support]

I am also interested in this topic, I have a customer who is looking to see if DCO will support SAML or dual authentication (two-factor) for the DCO customer portal. Currently they are using DUO (www.duo.com/docs/duoweb) and if SAML is not supported, they would like to know if it would be possible to access the source code to leverage DUO. 

Jef Faridi do you know if this is possible or if there is an enhancement request for this in place already?

(CID:129410036)

[DCIM_Support]

As a follow up to this request.  Our customer is stating that if two-factor authentication is not available, administrator accounts should only be able to access DCO (web or client) while on their corporate network.  As of now it appears that administrator accounts can be used to access DCO from anywhere once tenant portal is configured.  Is there a way to further restrict access using our software?dcportal.vsd

(CID:129410448)

[DCIM_Support]

Hi Robert,

If I understand correctly, DC server is placed behind the firewall(s), so I think the firewall(s)/rules may decide who can access a certain server  (such as DCO).

Kind regards

(CID:129410493)

[DCIM_Support]

Hi Krista & Justen,

For DCO,

Two factor authentication is not supported. Currently the supported user authentication in DCO can be by:

Data Center Operation server

Authentication server Type:  Active directory, Data Center Expert, LDAP

It seems we have already registered a feature request for two factor authentication in DCO, I will add you (and this post) to that feature request case as well.

Thanks,

Kind regards

(CID:129410311)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.