Two factor authentication (2FA) based on group member ship

Question

Hi everyone,   We implemented 2FA, but I do not want to use it for all my customers, just a few need 2FA. So I disabled the option 'Require all users to be two-factor authenticated', and I created a Advanced target.   That advanced target is connected to my test RDS. but when I login into the app portal that test RDS is still visible and accessible without 2FA.   Do I forget something?

DELL-Paul Fi · Accepted Answer

Hi, Try creating a rule like this: and then apply this to your desktop application.  Ensure your desktop application its not targeted to anything else. Regards Paul

DELL-Paul Fi · Answer

Hi,

Looking at your advanced target it looks like you have the APP_2FA in a number of times using "OR" so as long as the user is a member of the APP_2FA group they will be presented with the desktop application.

Also do you have the Application published to any other targets?

Regards

Paul

sader82 · Answer

Hi Paul,

I understand what you are saying. What I try to accomplish is that when a user is member of a specific group it is required to use 2FA.

And all other user use normal authentication. but I think that I miss something.

sader82 · Answer

Paul, I did that also yesterday and it worked!

vWorkspace

Was this post helpful?