5.2 Securing Windows Workstation with Multi-Factor Authentication

Let us assume Reltic Data, Inc. wants to implement multi-factor authentication for all Windows workstations to secure the data and provide authorized access to their employees.

This section explains the prerequisites, flow of actions, and step-by-step configuration details to achieve this.

This example refers to the following user profiles:

  • Clarie Lee: An administrator of Reltic Data, Inc.

  • Sussane Ross: An employee of Reltic Data, Inc.

Clarie, an administrator wants to enforce multi-factor authentication with the U2F and SMS OTP methods for the Windows login. After multi-factor authentication is implemented, employees must authenticate to both methods successfully to access the Windows workstation.

Clarie must perform the following tasks to implement multi-factor authentication for the Windows logon:

  1. Add a Repository

  2. Configure Methods

  3. Create a Chain

  4. Configure SMS Sender Policy

  5. Assign Chain to Windows Logon Event

To understand the sequential flow of configuration in the Advanced Authentication Administration portal, see Configuration Flow in Advanced Authentication for Windows Logon Event.

For information about how an end user enrolls the configured methods and authenticates to the Windows workstation using Advanced Authentication, see End User Tasks.