Questions tagged [multi-factor-authentication]

An authentication system is responsible to tell if the user is who they claim to be. A multi-factor uses multiple factors to check that claim.

The best-known authentication system is to use a password; this is a single factor. When combining more than one factor, using other items like a RFID card, biometrics or digital certificates, we get a multi-factor-authentication system.

617 questions
21
votes
3 answers

AWS Cognito - Enabling MFA | Error: MFA cannot be turned off if an SMS role is configured

Im trying to enable MFA for an existing AWS Cognito user pool. Im editing the user-pool configuration, but trying to save the new configuration results in a MFA cannot be turned off if an SMS role is configured error (see picture). I don't…
Vingtoft
  • 13,368
  • 23
  • 86
  • 135
18
votes
6 answers

AWS Cognito - reset user MFA

I have a Cognito user pool which has MFA set to Required with TOTP only (i.e. no SMS). My question is how do I reset the MFA for a user? For example what if the user loses his phone so he doesn't have anyway to login. I have tried reset password but…
14
votes
5 answers

How does a Guest User reset their MS Authenticator MFA settings in Azure Active Directory?

I know how to reset my Authenticator app MFA settings in my host tenant. I woud use this link https://account.activedirectory.windowsazure.com/proofup.aspx?proofup=1 per instructions found here…
14
votes
1 answer

Multi-Factor Authentication with Spring Boot 2 and Spring Security 5

I want to add multi-factor authentication with TOTP soft tokens to an Angular & Spring application, while keeping everything as close as possible to the defaults of Spring Boot Security Starter. The token-validation happens locally (with the…
14
votes
3 answers

Connect to Azure SQL in Python with MFA Active Directory Interactive Authentication without using Microsoft.IdentityModel.Clients.ActiveDirectory dll

To connect to Azure SQL Database using MFA (which is in SSMS as "Active Directory - Universal") Microsoft recommends and currently only has a tutorial on connecting with C# using Microsoft.IdentityModel.Clients.ActiveDirectory Setting…
dmi_
  • 1,187
  • 2
  • 12
  • 26
13
votes
3 answers

Microsoft Azure AD - error_description:Due to a configuration change made by your administrator, or because you moved to a new location etc

I am facing ERROR like below when connecting Microsoft Azure AD after enabling MFA. Before that it gets connected. Today while login, it required me to enable this security feature in my Phone(Microsoft Auithenticator APP). Unless this feature…
13
votes
4 answers

Not able login to Heroku account from command line

I am using codio.com . From there I am using ubuntu terminal to log into Heroku but it's giving me below error . I have the read the help page also . It says with MFA you have to use browser for login . But the issue is browser is not opening from…
10
votes
1 answer

Integration Test WebAuthN as an 2FA option

I want to add WebAuthN as an option for multi factor authentication to an Angular & Spring application. I use the WebAuthN java-webauthn-server library from Yubico. What is the best way to integration test my WebAuthN server, without a hardware…
10
votes
2 answers

Error trying to set up user MFA Preferences

I'm using the AWS CLI to enable a MFA user pool with only TOTP MFA (no SMS). aws cognito-idp set-user-pool-mfa-config --user-pool-id xxxx_xxxx --mfa-configuration OPTIONAL --software-token-mfa-configuration Enabled=true { …
Luciano Jr
  • 131
  • 1
  • 8
9
votes
2 answers

Token retrieval failed with an error In Azure Data Studio

Using the latest Azure Data Studio Version: 1.32.0 Attempting to access a database using Azure Active Directory MFA and am getting the error: Token retrieval failed with an error. Open developer tools to view the error How can I…
9
votes
3 answers

AWS MFA Issue Please verify your MFA serial number is valid and associated with this user

Been using https://github.com/broamski/aws-mfa to handle MFA for AWS with much success. I have three users who get the following error when trying to use it: An error occurred (AccessDenied) when calling the GetSessionToken operation:…
Allen Fisher
  • 607
  • 2
  • 7
  • 28
9
votes
1 answer

Is there a way for PWAs to access the phone number of the host device?

I plan on developing a Progressive Web App for Android devices - one major concern is if the PWA can access the host phone number. Our business is providing cheap mobile phones to our business partners and if our PWA can access the phone numbers of…
8
votes
0 answers

SendGrid 2FA activation/set up link not working

I try to get Sendgrid working with 2nd lowest plan (Essentials 40K - Monthly). However, always when I click link "Open SaaS Account on publisher’s site" in Azure Portal I got site telling following: Let's secure your account with Two-Factor…
8
votes
2 answers

aws sts get-session-token ... --token-code ... fails with InvalidClientTokenId, but MFA console login working

I am trying to retrieve session token on the AWS CLI like so: aws sts get-session-token --serial-number arn-string --token-code mfacode where arn-string is copied from the IAM management console, security credentials for the assigned MFA…
onouv
  • 528
  • 1
  • 5
  • 12
8
votes
3 answers

Connecting to Azure DB with Active Directory-Universal with MFA Support Authentication in C#

I need to access some part of SQL table data from c# console application.I need help to establish the server connection from c#. DataBase Details: Server type : Database Engine Authentication : Active Directory-Universal with MFA support. Also…
1
2 3
40 41