On prem 2FA/MFA

[danno]

Hello everyone,

Is there a way to turn on 2FA/MFA for the on prem? If not, is there any alternative anyone knows how to turn 2FA/MFA.

Thank you

Dan

[hubertmroz]

Hello,
Depends how much time you wanna spend on it and how much resources you have.
Running any reverse proxy with 2fa capabilities should do just fine.
You could potentially run nginx for windows on same machine as your current web, setup to run it on port 443 and rebind iis to run on 444, then setup nginx as rev proxy to fwd to localhost on 444 and enable 2fa on nginx via some projects on git:
GitHub - Arno0x/TwoFactorAuth: Two Factor Authentication web portal written in PHP
GitHub - nginx-shib/nginx-http-shibboleth: Shibboleth auth request module for nginx
If you are running Office365 and having AzureAD Premium 1 and don't mind the web being available to external network, you could make use of Azure Application Proxy. Super easy, just install the agent and configure your web in azure portal, plenty of guides: Remote access to on-premises apps - Azure AD Application Proxy - Microsoft Entra | Microsoft Learn
 SAML single sign-on for on-premises apps with Azure Active Directory Application Proxy - Microsoft E...

Other examples are DUO with IIS integration of Duo Network Gateway and enabling MFA via DUO:
 Can I protect Microsoft IIS applications with Duo Network Gateway?

Plenty of ways, but nothing without a little scratching and unless you go for open source revproxy like Caddy/nginx/haproxy, some money spent on paid software.

Regards, Hubert

[Obi_1_Cinobi]

Hello there!

Currently, there are no Lansweeper options to facilitate MFA for Lansweeper On-Prem. This is only available for the Lansweeper Cloud platform. But maybe our community can provide insight into how they got around this.

[SDent]

Hopefully this is something that is added natively in the near future. It is becoming a must have. 3rd Party Workarounds arent ideal