How to force multi-factor authentication on login
Hello,
I was wondering if it's possible to force multi-factor authentication on login to Pega. This would override Pega's default login and require a one time use password, sent either by email or text message. This should function similar to the way expenses.pega.com or time.pega.com works.
Updated: 14 Jun 2021 7:38 EDT
.
IN
Coforge BPM
US
I have seen this article but it doesnt explain how to force it upon login. I dont want to use this in any authentication service, i just want to use it in the standard PRPC login.
Updated: 17 Mar 2020 5:09 EDT
Accenture
SG
You can configure multi-factor authentication in security policies( using one time password).
Just set the values so it will get triggered based on your values.
You need to set values for
1. Maximum one time password failure attempts- Let say 1
2. maximum age- 300 seconds
3.validity of OTP -60
4.Email Account-You can use your email account or default for sending otp in email
5.SMS Account.- Sms account which you created.
whenever user enters the wrong password it will ask for the otp.
Thanks
Vinoth
Coforge BPM
US
Thanks Vinoth, but I do not want this only to occur on a failed login. I want this to happen on every login
Cognizant
IN
Hi Steven,
I have a similar requirement and was wondering if you can share your ideas on how you implemented this requirement?
Thanks,
Jill Haria
Please find below article which might be helpful.
https://community.pega.com/knowledgebase/articles/security/configuring-two-factor-authentication-one-time-password