Skip to content
Last update: 2022-03-11

Configure two-factor authentication

Two-factor authentication ensures that only users with trusted devices can log on. To provide two-factor authentication, you configure the OTP service. Then, end-users scan tokens and obtain passcodes using Sophos Authenticator or any third-party authenticator.

Introduction

To use two-factor authentication, you need to:

  • Turn on the OTP service and specify settings.
  • Scan tokens and obtain passcodes using Sophos Authenticator on the client.

Specify OTP service settings

First, you turn on the OTP service. Then, to maximize the protection this type of authentication offers, you require all users to use it. You also specify the features for which two-factor authentication is required.

The following steps are executed on the firewall.

  1. Go to Authentication > One-time password and click Settings.

  2. Specify the settings.

    Option Value
    One-time password On
    OTP for all users On
    Auto-create OTP tokens for users On

  3. Enable OTP for WebAdmin and User portal.

  4. Click Apply.

Obtain a token and passcodes

Users scan the OTP token through the user portal using Sophos Authenticator. The authenticator then provides passcodes.

Users must do as follows:

  1. Download for Android or for iOS on a mobile device.

  2. Sign in through the user portal. The user portal shows the OTP token.

    QR code and key

  3. Scan the OTP token using Sophos Authenticator. Sophos Authenticator begins creating passcodes.

    Passcode on Sophos Authenticator

  4. Go to user portal again and sign in by typing the password using the following format: <user_password><generated_passcode>

More resources

Back to top