# MFA for Secure Gateway

**URL:** https://community.royalapps.com/t/mfa-for-secure-gateway/1013
**Category:** Royal Server
**Created:** [August 16, 2019, 1:35pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013 "2019-08-16T13:35:57Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![massameno\_dan](https://community.royalapps.com/letter_avatar_proxy/v4/letter/m/9dc877/32.png) [@massameno\_dan](https://community.royalapps.com/u/massameno_dan)
#### Post date: [August 16, 2019, 1:35pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/1 "2019-08-16T13:35:57Z")

</div>

=== Feature Enhancement Request ===

We’re trying out the Multifactor Authentication (MFA, a.k.a, two-factor or 2FA) feature on the Document Store on Royal Server. It works great! But that’s not quite what we needed.

Can we do MFA on the Royal Server Secure Gateway? For instance, when the engineers arrive in the morning they would have to MFA to get their first connection through the Secure Gateway but after that, all new sessions would go through the Secure Gateway without re-checking the MFA.

There should probably be a setting for Maximum-Session-Time to time-out the session and force the MFA to repeat. We’d probably set ours to 30 hours or something to let users get a full day’s work in.

We use Duo Security here but the Microsoft Authenticator is a valid second option for us.

Thank you.

---

<div class="post-metadata">

### Author: ![ian](https://community.royalapps.com/letter_avatar_proxy/v4/letter/i/bb73d2/32.png) [@ian](https://community.royalapps.com/u/ian)
#### Post date: [August 20, 2019, 4:29pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/2 "2019-08-20T16:29:26Z")

</div>

We would definitely like to see this as well. Duo or google auth would work for us.

---

<div class="post-metadata">

### Author: ![stefan\_koell](https://community.royalapps.com/user_avatar/community.royalapps.com/stefan_koell/32/9_2.png) [@stefan\_koell](https://community.royalapps.com/u/stefan_koell)
#### Post date: [August 22, 2019, 7:28am UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/3 "2019-08-22T07:28:37Z")

</div>

Thanks, Dan. We will look into it and update this thread once we have something to share.

---

<div class="post-metadata">

### Author: ![timo](https://community.royalapps.com/letter_avatar_proxy/v4/letter/t/c4cdca/32.png) [@timo](https://community.royalapps.com/u/timo)
#### Post date: [September 20, 2019, 2:43pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/4 "2019-09-20T14:43:32Z")

</div>

This would be an awesome feature.

---

<div class="post-metadata">

### Author: ![massameno\_dan](https://community.royalapps.com/letter_avatar_proxy/v4/letter/m/9dc877/32.png) [@massameno\_dan](https://community.royalapps.com/u/massameno_dan)
#### Post date: [September 20, 2019, 2:55pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/5 "2019-09-20T14:55:21Z")

</div>

Just as a point of clarification… we don’t make our network engineers work 30 hours per day. 🙂

I was just choosing an arbitrary number that was 24 \< x \< infinity.

---

<div class="post-metadata">

### Author: ![daniel\_cattigan](https://community.royalapps.com/letter_avatar_proxy/v4/letter/d/7bcc69/32.png) [@daniel\_cattigan](https://community.royalapps.com/u/daniel_cattigan)
#### Post date: [November 12, 2019, 10:55am UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/6 "2019-11-12T10:55:22Z")

</div>

2FA is a hard requirement from our security team. What progress or updates can you provide for this feature?

Thanks

Dan

---

<div class="post-metadata">

### Author: ![jouni\_varjonen\_4m](https://community.royalapps.com/letter_avatar_proxy/v4/letter/j/71e660/32.png) [@jouni\_varjonen\_4m](https://community.royalapps.com/u/jouni_varjonen_4m)
#### Post date: [November 14, 2019, 12:02pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/7 "2019-11-14T12:02:54Z")

</div>

This is already available, any idea hot to use this feature?

---

<div class="post-metadata">

### Author: ![wolfgang\_back](https://community.royalapps.com/user_avatar/community.royalapps.com/wolfgang_back/32/439_2.png) [@wolfgang\_back](https://community.royalapps.com/u/wolfgang_back)
#### Post date: [November 20, 2019, 2:44pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/8 "2019-11-20T14:44:05Z")

</div>

Would also need this feature!

---

<div class="post-metadata">

### Author: ![joshua\_kroger](https://community.royalapps.com/letter_avatar_proxy/v4/letter/j/3ab097/32.png) [@joshua\_kroger](https://community.royalapps.com/u/joshua_kroger)
#### Post date: [February 18, 2020, 4:42pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/9 "2020-02-18T16:42:13Z")

</div>

I am evaluating RoyalServer for use in our environment and MFA on the Secure Gateway is an absolute must for us as well. Has this feature been officially added to the product roadmap?

---

<div class="post-metadata">

### Author: ![scott\_davis](https://community.royalapps.com/letter_avatar_proxy/v4/letter/s/ecccb3/32.png) [@scott\_davis](https://community.royalapps.com/u/scott_davis)
#### Post date: [April 15, 2020, 7:41pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/10 "2020-04-15T19:41:01Z")

</div>

My team is already using RoyalTS, and we need a connection broker like RoyalServer.

MFA is mandatory for us, so we are waiting for this feature.

---

<div class="post-metadata">

### Author: ![wolfgang\_back\_eh](https://community.royalapps.com/letter_avatar_proxy/v4/letter/w/b19c9b/32.png) [@wolfgang\_back\_eh](https://community.royalapps.com/u/wolfgang_back_eh)
#### Post date: [December 1, 2020, 2:58pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/11 "2020-12-01T14:58:54Z")

</div>

Any news on this?

---

<div class="post-metadata">

### Author: ![joshua\_kroger](https://community.royalapps.com/letter_avatar_proxy/v4/letter/j/3ab097/32.png) [@joshua\_kroger](https://community.royalapps.com/u/joshua_kroger)
#### Post date: [December 1, 2020, 4:36pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/12 "2020-12-01T16:36:41Z")

</div>

I’m subscribed to this threat and completely agree with Wolfgang. This is an absolute must that we’ve been waiting a long time for. I would like an update as well.

---

<div class="post-metadata">

### Author: ![alper\_uzmezler](https://community.royalapps.com/user_avatar/community.royalapps.com/alper_uzmezler/32/478_2.png) [@alper\_uzmezler](https://community.royalapps.com/u/alper_uzmezler)
#### Post date: [December 18, 2020, 4:43am UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/13 "2020-12-18T04:43:57Z")

</div>

This would be welcome on our side as well.

---

<div class="post-metadata">

### Author: ![stefan\_koell](https://community.royalapps.com/user_avatar/community.royalapps.com/stefan_koell/32/9_2.png) [@stefan\_koell](https://community.royalapps.com/u/stefan_koell)
#### Post date: [December 18, 2020, 9:35am UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/14 "2020-12-18T09:35:15Z")

</div>

I’m not sure if and when we can implement this. The 3rd party component we are using doesn’t have an API we could hook into. We contacted the Vendor and asked for this but we haven’t got a response yet.

Rest assured, as soon as this is possible, we will implement it.

Sorry for the bad news.

---

<div class="post-metadata">

### Author: ![ben\_houghton](https://community.royalapps.com/letter_avatar_proxy/v4/letter/b/43a26b/32.png) [@ben\_houghton](https://community.royalapps.com/u/ben_houghton)
#### Post date: [March 18, 2021, 4:47am UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/15 "2021-03-18T04:47:39Z")

</div>

Any update on MFA for Royal Gateway?

---

<div class="post-metadata">

### Author: ![stefan\_koell](https://community.royalapps.com/user_avatar/community.royalapps.com/stefan_koell/32/9_2.png) [@stefan\_koell](https://community.royalapps.com/u/stefan_koell)
#### Post date: [March 18, 2021, 7:28am UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/16 "2021-03-18T07:28:09Z")

</div>

Unfortunately we still have no ETA for the 3rd party vendor component. Not sure if we are able to implement it in the V4 release. Might be V4.1 or so.

---

<div class="post-metadata">

### Author: ![dsaliva](https://community.royalapps.com/letter_avatar_proxy/v4/letter/d/c2a13f/32.png) [@dsaliva](https://community.royalapps.com/u/dsaliva)
#### Post date: [March 18, 2021, 1:17pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/17 "2021-03-18T13:17:13Z")

</div>

I saw this the other day when i logged into the Royal Server.

![]()

---

<div class="post-metadata">

### Author: ![michael\_cote](https://community.royalapps.com/letter_avatar_proxy/v4/letter/m/ea666f/32.png) [@michael\_cote](https://community.royalapps.com/u/michael_cote)
#### Post date: [April 9, 2021, 7:43pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/18 "2021-04-09T19:43:32Z")

</div>

We’re looking for a similar solution to provide MFA to the secure gateway before being able to access remote sessions. This is a huge auditing item and would certainly be a selling point for us. I’m going to subscribe as well. Is there a formal place to put in feature requests, or is this the correct forum?

---

<div class="post-metadata">

### Author: ![ben\_houghton](https://community.royalapps.com/letter_avatar_proxy/v4/letter/b/43a26b/32.png) [@ben\_houghton](https://community.royalapps.com/u/ben_houghton)
#### Post date: [April 11, 2021, 10:53pm UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/19 "2021-04-11T22:53:49Z")

</div>

SAML or Radius would do. If we had Radius we could just use Windows NPS and AzureAD extension to do MFA. Either fits our requirements.

---

<div class="post-metadata">

### Author: ![michael\_cote](https://community.royalapps.com/letter_avatar_proxy/v4/letter/m/ea666f/32.png) [@michael\_cote](https://community.royalapps.com/u/michael_cote)
#### Post date: [April 12, 2021, 3:16am UTC](https://community.royalapps.com/t/mfa-for-secure-gateway/1013/20 "2021-04-12T03:16:17Z")

</div>

RADIUS would be even better imo because you could proxy RADIUS requests to an MFA provider to still give you the MFA ability.

[Next page](https://community.royalapps.com/t/mfa-for-secure-gateway/1013.md?page=2)
