As we mentioned in our previous posts about multi-factor authentication, adopting this security measure minimizes the risk of an intruder gaining access to your databases, websites and other critical data.
When you incorporate multi-factor authentication (MFA) methods at your access point, your users will be required to confirm their identity presenting two or more “factors” or pieces of evidence that prove they are who they say:
– knowledge (something the user and only the user knows, like a password)
– possession (something the user and only the user has, like an SMS code sent to a registered mobile number)
– inherence (something the user and only the user is, like fingerprints)
Two-factor authentication (also known as 2FA) is a method of multi-factor authentication which requires two of these pieces of evidence we mentioned. There are many 2FA methods and Cybele Software Dev-Team works to get our solutions to support most of them, starting by the most popular. (1)
Now you are able to integrate Duo 2FA within our Thinfinity products (both VirtualUI and the Remote Desktop Server) solutions.
After the integration, you will be able to select the following options as the second factor (besides the regular password):

• Send a push to the DUO Mobile application
• Call a number associated with that DUO account.
• Send an SMS text message with a Passcode.

How to implement two-factor authentication on Thinfinity solutions

• To configure the DUO’s Two-Factor authentication for our Thinfinity Remote Desktop Server, click here.
• To learn how to configure the DUO’s Two-Factor authentication for VirtualUI, just continue reading this article.

Integrate Duo 2FA Secure Login to apps virtualized with VirtualUI

After checking that you’re running the latest version (download page / features page), please follow these steps:
On the Duo admin login page (open it here):

1) Navigate to the “Applications” tab and click on “Protect an Application”:

2) Search for “Web SDK” and click on “Protect this Application”:

3) In here, you will find your “Integration Key”, your “Secret key” and your “API Hostname”, required to configure Thinfinity’s side:

4) Open the Thinfinity VirtualUI Server Manager, navigate to the “Authentication” tab, click on “Add”, and chose “DUO”.

5) You must now enter your “Integration Key”, “Secret Key”, and “API Hostname” provided by DUO :

6) Click “OK” and “Apply”.
7) Navigate to the Thinfinity VirtualUI web server.
A new method of authentication should have been added to the drop-down menu :

After you enter valid DUO credentials, you will be redirected to the 2FA option method :

You can choose to either:

• Send a push to a DUO validated mobile device ( Using the DUO Mobile application )
• Call a number associated with that DUO account.
• Send an SMS text message with a Passcode.

And that’s it!

Would you like to learn more about Multi-Factor Authentication and other alternatives to secure your Thinfinity apps access?