Question
TFNSW
AU
Last activity: 17 May 2023 19:02 EDT
How to enable MFA for prweb
Hi,
There are 4 applications present in the same server. Each application is using different authentication mechanism. For custom Authentication, we are using pxsendOTP and pxverifyOTP and no issues with MFA for custom authentication. We want to enforce MFA for all applications which is using basic credentials. We have updated the security policies with required details for email account and enabled MFA part of Platform Authentication service. For the application url, the MFA works well.
This does not force MFA for /prweb. I am able to bypass the MFA and login to application. What is the way to enforce MFA for /prweb as well?
Bits in Glass
IN
@PanimozhipavaiT16739463 can you please check below URL? You wouldn't be able be apply MFA on prweb instead You can follow 2nd approach where you would need to redirect users logging into prweb to application URL
TFNSW
AU
@Anoop Krishna
Thanks Anoop, But there is a security threat involved in doing the redirection from web-login html.
Also we have 4 different application and different set of users, if we enable redirection from ELB, we need to hardcode to single application url, which is not a viable solution in our scenario. Is there any other option available to achieve this?