Huawei Cloud Virtual MFA

Updated on 2023-12-05 GMT+08:00

Scenarios

After you enable virtual MFA, Huawei Cloud virtual MFA authentication is used by default. When an end user uses the account and password to log in to the cloud desktop from a client, the end user must pass the secondary authentication of the MFA dynamic verification code before accessing the cloud desktop.

Prerequisite

You have purchased a cloud desktop.

Use Restrictions

The emergency mode is disabled.

NOTE:

The emergency mode is disabled by default.

If the emergency mode is enabled, multi-factor authentication cannot be used. Enter the service ticket information, obtain the emergency mode status of the current tenant, and disable the emergency mode as required. For details, see Submitting a Service Ticket.

Procedure

  1. Log in to the management console.
  1. Click Tenant Configuration.

    The Tenant Configuration page is displayed.

  2. Under Multi-factor authentication configuration, select Enable for Virtual MFA.

    Figure 1 Enabling virtual MFA

  3. Click OK.

    NOTE:

    After you enable virtual MFA, end users need to use the virtual MFA device in the Huawei Cloud application on a smart device (such as a mobile phone) to obtain a dynamic verification code when logging in to the desktop from a client for Workspace. (For the first login, the virtual MFA device must be bound to the smart device.) Then end users need to enter the dynamic verification code on the login page of the Workspace. For details, see Logging In to a Desktop Using an SC, Logging In to a Desktop Using a TC, Logging In to a Desktop Using a Mobile Terminal.

Associated Operations

You can disable virtual MFA under Multi-factor authentication configuration. After multi-factor authentication is disabled, users can directly use their accounts and passwords to log in to cloud desktops with no need for secondary authentication of virtual MFA devices.

After virtual MFA is disabled, all information about the bound virtual MFA device is deleted from the system. Notify end users to delete the MFA device from the MFA virtual device list on the mobile device. If you want to enable virtual MFA again, notify end users to bind the virtual MFA device again.

Feedback

Feedback

Feedback

0/500

Selected Content

Submit selected content with the feedback