Configure two-factor authentication
Two-factor authentication ensures that only users with trusted devices can log on. To provide two-factor authentication, you configure the OTP service. Then, end-users scan tokens and obtain passcodes using Sophos Authenticator or any third-party authenticator.
To use two-factor authentication, you need to:
- Turn on the OTP service and specify settings.
- Scan tokens and obtain passcodes using Sophos Authenticator on the client.
Specify OTP service settings
First, you turn on the OTP service. Then, to maximize the protection this type of authentication offers, you require all users to use it. You also specify the features for which two-factor authentication is required.
The following steps are executed on the firewall.
- Go to Authentication > One-time password and click Settings.
Specify the settings.
Option Value One-time password On OTP for all users On Auto-create OTP tokens for users On
Enable OTP for WebAdmin and User portal.
- Click Apply.
Obtain a token and passcodes
Users scan the OTP token through the user portal using Sophos Authenticator. The authenticator then provides passcodes.
Users must do as follows:
- Download for Android or for iOS on a mobile device.
Sign in through the user portal. The user portal shows the OTP token.
Scan the OTP token using Sophos Authenticator. Sophos Authenticator begins creating passcodes.
Go to user portal again and sign in by typing the password using the following format: