Support Center

How to Enable Multi-factor Authentication for SSH on Linux Systems

Enable Multi-factor Authentication for SSH on Linux

Tip: You can enable MFA for multiple systems using the more actions menu's Enable MFA option. 
  1. In the JumpCloud Administrator Portal, go to the Systems list.
  2. Select the Linux system to view its System Details.
  3. In the system's Settings, select Enable Multifactor Authentication on this System.
    After you select this option, you are prompted to read a notification about MFA. Click ok.

    Note: If Public Key Authentication is selected, at the same time as MFA, Public Key takes precedence and users aren't prompted for a verification code.
  4. Click save system.
    Important: After you enable MFA on this system, users must obtain an application to generate TOTP tokens and validate their TOTP key to login to this system.
  5. Test:
    $ ssh auser@192.168.1.1
    Password: 
    Verification code: 
    Welcome to Ubuntu 16.04 LTS (GNU/Linux 4.4.0-28-generic x86_64)
    
     * Documentation:  https://help.ubuntu.com/
    
    188 packages can be updated.
    0 updates are security updates.
    
    
    The programs included with the Ubuntu system are free software;
    the exact distribution terms for each program are described in the
    individual files in /usr/share/doc/*/copyright.
    
    Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
    applicable law.
    
    auser@ubuntu1604:~$ 
    
    
    

Determine who has MFA

To determine the MFA status of users bound to this system, go to the Systems Users tab. User MFA Status is shown in the MFA Status column. To learn about viewing MFA status and enabling MFA for users, see Using Multifactor Authentication with JumpCloud.
 

Multi-Factor Authentication for Linux | JumpCloud Tutorial

 

Last Updated: May 14, 2019 08:22AM MDT

Related Articles
desk-forwarding@jumpcloud.com
https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete