Multi-Factor Authentication Setup On Cloud Portal IFS

Intermediate | 30 Minutes

Security Portal

Overview

You want to increase and enhance the authentication security to users accessing the Infor Cloud by implementing multi-factor authentication (MFA). MFA is an authentication method that requires the user to provide two or more verification factors to gain access to a resource such as an application.

Tutorial

While the Infor Cloud uses MFA via the customer federated connection handled by the customer's identity provider, it is also possible to configure MFA directly on your tenant for internal accounts. We'll guide you through the steps to configure multi-factor authentication (MFA) for internal cloud identity accounts in Infor Cloud.

IFS User Management handles the Cloud Identity MFA configuration and setup. When Multi-Factor Authentication (MFA) is enabled and enforced, you will be prompted to register a device for MFA upon your first authentication with Infor Portal Identities. Depending on the configuration set by the Infor Portal administrator, you can authenticate using Time-based One-Time Password (TOTP), Duo, or both.

This video provides an overview of configuring Multi-Factor Authentication (MFA) in Infor OS using the Infor Federated Service identity management system.

Get acquainted with the Infor User Management General Settings page and the Multi-Factor Authentication Configuration.

You should now be able to configure Infor's MFA on the tenant to work with your Infor Cloud identities.

Best Practices

• MFA requirements for user authentication via the federated connection are to be handled by the customers identity provider configuration.

Multi-Factor Authentication (MFA) through a Federated Connection

• Authentication to Infor CloudSuite solutions is achieved by establishing a federation trust between Infor CloudSuite and a customer’s Identity Provider (e.g., ADFS, Ping, Okta, Azure).
• Multi-Factor Authentication (MFA):

Infor CloudSuite does not require MFA, but customers may choose to implement it based on their security requirements.

Infor does not support direct MFA configurations within Infor CloudSuite through a federated connection.

MFA is performed at the time of logging into the customer’s domain and must be configured within the customer’s Identity Provider.

The design and implementation of MFA are the customer’s responsibility.

The federation trust setup process between Infor CloudSuite and a customer’s Identity Provider remains the same regardless of whether MFA is implemented.

• MFA can be enabled and enforced for Infor Cloud identity accounts which can be leveraged for users that do not have access within the customer IdP system.

Multi-Factor Authentication (MFA) using Cloud Identity authentication

Resources

MFA Configuration Page

Help document on the Multi-Factor Authentication Configuration page.

The MFA Configuration page has these settings:

To enable MFA for cloud identity user accounts you need to login into the portal and go to the following

Home -> User Management -> Settings > General Settings

Multi-Factor Authentication (MFA) Settings

Additional Help

Refer to the MFA setup and configuration documents for further details.

• MFA login and device registration
• Duo authentication
• Home Realm Discovery
• Editing MFA settings
• Supported TOTP methods
• Adding a device with TOTP
• Adding a device with Duo
• Managing devices
• Setting a device as a default