Tools

Enable two-factor authentication on DRE

How to enable two-factor authentication for technicians on DRE. This forces Technicians to use SSO Two-Factor Authentication to login to the DRE Admin Area.

First published date

4/9/2019 7:10 PM

Last published date

4/9/2019 7:10 PM

Overview

This article details how to enable two-factor authentication for technicians on DRE. This forces Technicians to use SSO Two-Factor Authentication to login to the DRE Admin Area.

Product section

Dameware Remote Everywhere

Resolution

The Technician must setup Two-Factor Authentication (2FA) for their SolarWinds Single Sign On (SSO) login as follows: 

  1. Have the Technician login to the Admin Area.
  2. Select the User Menu (top right corner).
  3. Press on Two Factor Authentication. This will open the SSO Two-Factor Authentication menu on a new tab.
  4. Download an authenticator app as instructed.
  5. Associate the app with this Tech account using the presented code (QR or alphanumeric).
  6. Save the Recovery Code (This is an extremely important step for account recovery should you lose your 2FA device).
  7. When ready, enter the 6 digit code from your app and click on Confirm Setup.

This procedure can also be performed for the Main Administrator to allow use of Two-Factor Authentication (2FA) on their own login.

To force a Technician to have to use the Two-Factor Authentication (meaning that will not be able to login unless they login through SSO with 2FA) - you can do so as follows: 

  1. Login to the Admin Area as the Main Administrator or an Admin.
  2. Go to Management >Technicians.
  3. Select the intended technician.
  4. Check the Force Two-Factor Authentication usage option.
    You will be prompted to please confirm that the steps mentioned above on this article were performed. Failing to perform the aforementioned steps prior to forcing 2FA on a technician will lock out that technician from logging in until you disable the "Force Two-Factor Authentication usage" option again.
  5. Click the Save button on the bottom right corner.
  • Note that Technicians will need to setup their Two-Factor Authentication prior to having this option enabled on their profile.
  • Any tech with access to the Admin Area's Management > Technicians menu and appropriate permissions can disable this setting for themselves or other techs. It is important to review Admin Area access Permissions for each Technician under their profile's Permissions options.
  • There is no way to enable/force this setting globally at this time.