MultiOTPSecond factor certification

Features

By deploying Multiotp on the server side Server，User Windows System Install MultiotPCREDENTIALPROVIDER, Implement the user's local login or log in to Windows through remote desktop，
In addition to providing user passwords (local account passwords or AD account passwords in the domain environment)，Still need to provide OTP dynamic password，In order to log in to Windows。

Configuration guide

Install Multiotp Server

Download Multotp installation packageInstall WebService serviceConfirm that the service has been installed

Download link：https://download.multiotp.net/

In Windows SEVER decompression compression，The administrator executes the webservice in the Windows directory_Install script

Use Chrome to open the Multiotp address：http://localhost:8112/

Windows ServerUsers who need to be synchronized on the upper configuration

Create safety groupSafety group adds synchronization users

Synchronize AD user to Multiotp

Configure the MultiOTP server and client certification passwordConfigure Multiotp synchronization parameters and synchronizeCheck the user that has been synchronizedClick the print buttonBinding mobile phone authentication softwareMobile phone authentication software display dynamic code

Open Powershell terminal, Enter the Windows directory under the MultiotP decompression directory to execute the following command

.\multiotp -config server-secret=secret2OTP

Open Powershell terminal, Enter the Windows directory under the MultiotP decompression directory to execute the following command，Pay attention to changing the address of AD，port，Usernames and password parameters

.\multiotp -config default-request-prefix-pin=0
.\multiotp -config default-request-ldap-pwd=0
.\multiotp -config ldap-server-type=1
.\multiotp -config ldap-cn-identifier="sAMAccountName"
.\multiotp -config ldap-group-cn-identifier="sAMAccountName"
.\multiotp -config ldap-group-attribute="memberOf"
.\multiotp -config ldap-ssl=0
.\multiotp -config ldap-port=389
.\multiotp -config ldap-domain-controllers=DC.dragon.com
.\multiotp -config ldap-base-dn="DC=dragon,DC=com"
.\multiotp -config ldap-bind-dn="CN=Administrator,CN=Users,DC=dragon,DC=com"
.\multiotp -config ldap-server-password="2wsx@WSX"
.\multiotp -config ldap-in-group="2FAVPNUsers"
.\multiotp -config ldap-network-timeout=10
.\multiotp -config ldap-time-limit=30
.\multiotp -config ldap-activated=1
.\multiotp -debug -display-log -ldap-users-sync

Use Microsoft Authenticator Or Google Authenticator scan QR code

Dynamic code is updated every 30 seconds

User computer installation MultiotPCREDENTIALPRovider

Open the download pageClick to download the linkDecompress installationSet Multiotp Server URL and passwordClick NextConfigure local login and remote login whether a dynamic code requiresClick to install

Open https://download.multiotp.net/, Click Credential-provider link

Fill in the URL and Secret of Multiotp，Secret and Multiotp configured above The server password remains the same

Fill in the URL and Secret of Multiotp，Secret and Multiotp configured above The server password remains the same

Restart the computer，Verify OTP dynamic code

Enter the user passwordEnter the mobile phone dynamic code

评论