Requiring YuibiKey or Google Auth MultiFactor

Customer forum for LastPass Enterprise

Moderators: admin, azitnay, anatoly_LP, chantieLP, JoeSiegrist, robyn

Requiring YuibiKey or Google Auth MultiFactor

Postby tchung115 » Wed Apr 08, 2015 7:25 pm

Hi,

For enterprise policies, I want to require multifactor auth, but only YubiKey or Google auth. Is this possible?

In the policies configuration page, you can "require YubiKey" and "require google authenticator". If I were to add both policies to this list can a user enable one or the other, or will it require both?

I know I can use "allow any multifactor" policy, but that doesn't meet my requirement, but would be the policy of last resort.

Thanks,
Topher
tchung115
 
Posts: 2
Joined: Wed Apr 08, 2015 7:21 pm

Re: Requiring YuibiKey or Google Auth MultiFactor

Postby tchung115 » Thu Apr 09, 2015 2:34 am

I've run a test. Here's what I did:
1.) Added policy "Require YubiKey"
2.) Added policy "Require Google Auth"
3.) Removed policy "Require any multifactor auth."
4.) Created a new test account.
5.) After activating the account, It required that I setup google auth. It did not allow me to choose YubiKey as an alternative.

So the answer to my question: No, you can not add both the policies above, and let the user choose either.

I undid my changes in reverse, and now back to the "Require any multifactor auth"

For the suggestion box: Allow a "Require at least one of the following approved multifactor methods. Values: checkboxes for each supported multifactor."

Regards,
Topher Chung
Manager of Security
Elementum.com
tchung115
 
Posts: 2
Joined: Wed Apr 08, 2015 7:21 pm


Return to LastPass Enterprise

Who is online

Users browsing this forum: No registered users and 3 guests