MFA for Secure Gateway

stefan_koell · October 6, 2022, 5:17pm

Thanks for the kind words, Robert! I’m glad the implementation works well for you.

Since the MFA code prompt is triggered by a custom authentication request on the SSH protocol level, we actually don’t know if a MFA code will be requested until we get the authentication request on the client side. Therefore it will not be possible to figure this out beforehand and let the client display a different message at that point. Sorry!

stephen_dunne · October 10, 2022, 12:49pm

Is the beta implementing MFA available now ? If so what’s the process for getting it ?

stefan_koell · October 11, 2022, 6:17am

Hi Stephen,

you can find our beta versions here: https://www.royalapps.com/go/kb-all-downloadbeta

Docs are still a work in progress but can be found here: https://docs.royalapps.com/r2022/royalserver/management/multi-factor-authentication/index.html

Please make sure you test beta versions on non-production/non-critical machines and make backups of your files/settings before you proceed.

Regards,
Stefan

stephen_dunne · October 19, 2022, 5:56pm

okay, finally got this working today and first impressions are good.

A few suggestions

When adding the MFA users and the standard windows “Select Users or Groups” comes up, it would be good to default to Entire directory if the server is in a domain. An alternate would be to detect where in the tree the last search was performed from and repeat the use of that node unless changed.

Adding a number of domain users gets old real quick when having to keep switching from the local server to the domain

I’d like the ability to add both the user_id and the cache timeout to the MFA userlist via the column chooser. In general I think you should have the option of seeing every value presented in the user that exists in the edit field for a user

All in all this is really promising and I’m looking forward to seeing where it ends up ! It helps enormously with the sell job to management both of Royal TS and RoyalServer

joshua_kroger · March 9, 2023, 8:26pm

Hey Stefan,

Any idea on when this will come out of beta and into the stable version?

stefan_koell · March 10, 2023, 7:07am

We have no specific date right now. We are currently reworking the Royal Server console UI and we are not really sure how long this will take but we aim for May, hopefully April.

robert_gleaden · June 1, 2023, 12:59pm

New UI looks very good! Hopefully we have a full release shortly! Our team is dying to get this but in-stable!

serban_dogarescu · August 4, 2023, 8:22am

The official version of Royal TS Gateway with MFA was released ?

Thank you

stefan_koell · August 4, 2023, 8:24am

Still in beta but the release is just around the corner. Stay tuned…

serban_dogarescu · August 4, 2023, 8:33am

Hi Koell,

as our Security Company push us to move away from Royal TS if not MFA implement, can you please indicate a deadline for the official release ? We need to indicate this info in order to have internal approval for a security exception. aka accept the risk for some time …

Thank you

stefan_koell · August 4, 2023, 8:36am

I can’t really tell the exact date, sorry. All I can say is that we are currently working on finalizing everything for the release. I surely hope it will be before the end of August - probably/hopefully earlier.

serban_dogarescu · August 25, 2023, 7:52am

Hi Koell

any new on this ?

thank you

stefan_koell · August 25, 2023, 8:17am

Hi Serban,

yes, we released our new major versions a couple of days ago. See: https://www.royalapps.com/go/kb-server-main-releasenotes

Regards,
Stefan

serban_dogarescu · August 25, 2023, 8:49am

Good news Stefan !

We will test the new version with MFA and provide feedback.

Regards

serban_dogarescu · August 25, 2023, 3:42pm

we tested and is working fine. Clean and simple as we wish. Good job !

We used a trial license 30 days in order to test.

How can we convert the version 4 permanent license in a version 5 permanent license ?

Thank you

stefan_koell · August 26, 2023, 8:13am

Hi Serban,

I recommend you contact our support team with the license details of your current license to work out how to upgrade your license:

https://www.royalapps.com/go/support-ticket-new

Regards,
Stefan

david · April 17, 2025, 7:17am

Any updates on MFA with Secure Gateway (Remote Desktop Gateway as well) in TSX App?

stefan_koell · April 23, 2025, 6:03am

@David: MFA with Secure Gateway has been implemented. For more information, visit:

https://docs.royalapps.com/r2023/royalserver/general/mfa.html

https://docs.royalapps.com/r2023/royalserver/general/mfa-user-store.html

As for Remote Desktop Gateway, this is not part of Royal Server and heavily depends on the implementation you’re using. We do support credentials which require the MFA code part of the username or password:
https://docs.royalapps.com/r2023/royalts/reference/organization/credential.html#-mfa