#MFA CODE AMAZON WORKSPACES HOW TO#
#MFA CODE AMAZON WORKSPACES PASSWORD#

An AWS Directory Service such as AWS Managed AD or AD Connector.An AWS environment with Amazon WorkSpaces configured.To follow the steps in the post, you need the following: It is recommended to deploy this configuration in a test environment before deploying to production. When MFA is enabled, the Amazon WorkSpaces client prompts for the MFA code. Step 8: The AD Connector completes authentication and the customer can access the service Step 7: The RADIUS server checks the OTP and responds with ‘success’ if it was correct. Step 6: The Active Directory sends the secondary credentials OTP to the RADIUS server.

Steps 4 & 5: Active Directory validates the primary authentication part (domain credentials) with the on-premises domain controllers for AD Connector or AWS Managed Domain Controllers if using AWS Managed AD.

#MFA CODE AMAZON WORKSPACES PASSWORD#

Step 3: The WorkSpaces client sends both the first factor domain user name and password and the second factor OTP to the AWS Directory Service. Steps 1 & 2: The Amazon WorkSpaces user gets the one time password (OTP) from an authentication app, such as Google Authenticator. This is how the authentication flow works when using MFA with Amazon WorkSpaces: FreeRADIUS is used by educational institutions, internet service providers and for enterprise networks. FreeRADIUS is the most popular open source RADIUS server and the most widely deployed RADIUS server in the world. It is developed and distributed under the GNU General Public License, version 2, and is free for download and use. FreeRADIUS is a modular, high-performance free RADIUS suite. You can implement this configuration using the free open source RADIUS server, FreeRADIUS. With MFA, you must enter an authentication code (the second factor), which is provided by your MFA solution.įor MFA on Amazon WorkSpaces, you need a remote authentication dial-in user service (RADIUS) server that can authenticate the one-time password. MFA adds an extra layer of protection to a user name and password (the first “factor”). With Amazon WorkSpaces, you can quickly scale to provide thousands of desktops to workers across the globe. You can use Amazon WorkSpaces to provision either Windows or Linux desktops in a few minutes. Amazon WorkSpaces is a managed, secure cloud desktop service.

#MFA CODE AMAZON WORKSPACES HOW TO#

In this blog post, we show how to configure FreeRADIUS and LinOTP for multi-factor authentication to Amazon WorkSpaces.

Mfa code amazon workspaces