Wisepay Multi-Factor Authentication - what are you using?

[ronnoco]

Hello all,

 

Our Finance team look after Wisepay so up until now, I've not had to do anything but they have been in contact explaining that Wisepay have introduced MFA and it looks like its live and necessary for our school now.

 

https://support.communitybrands.uk/s/article/WisePay-How-to-setup-Multi-Factor-Authentication

 

Ideally, I don't want to ask staff to install an app on their phone so would prefer to use a browser extension. Has anyone got any experience or recommendations?

 

What are others doing to resolve this?

 

Many Thanks

[Steve21]

We're just looking at similar for this, and personally I think the phone route would be easier. The problem I can see with the extensions is unless you're getting them sync'd across browsers etc, what happens if they need to log on with another computer etc? Surely that wouldn't work without adding every pc as a separate login would it?

 

Also, thinking about the current situation with working at home etc, the ability to roam I think makes sense especially when it's secured by the 2FA in the first place

 

Steve

[ronnoco]

We're just looking at similar for this, and personally I think the phone route would be easier. The problem I can see with the extensions is unless you're getting them sync'd across browsers etc, what happens if they need to log on with another computer etc? Surely that wouldn't work without adding every pc as a separate login would it?

 

Also, thinking about the current situation with working at home etc, the ability to roam I think makes sense especially when it's secured by the 2FA in the first place

 

Steve

 

Thanks for replying, much appreciated. Our Finance staff all tend to use their own computers so the roaming shouldn't be an issue but I'm not sure what extension I would use as they Wisepay recommended ones only work on IOS and Android.

 

Alternatively, I was thinking of maybe providing a cheap tablet as we have Wi-Fi in the Finance area. Not sure if multiple staff could share it and use the same app?

 

Perhaps using their own device is a better option actually, like you say, it would work from anywhere. It just doesn't sit well with me expecting them to use their own device.

[paulkerton]

Not sure if multiple staff could share it and use the same app?

 

Not really.

If you want them to have their own device to do it, perhaps get them a cheaper Android handet and just not put a SIM in it (Nokia 1.3 with Android 10 Go is about £90 a pop) or an iPod Touch?

[jthompson]

YubiKeys with the YubiKey Authenticator app installed to their PCs? The T-OTP tokens would be stored on the YubiKey, and the app would be able to display the code.

[MatthewL]

We use WinAuth in a similar situation.

[ronnoco]

We use WinAuth in a similar situation.

 

Just wanted to say Winauth worked great!, thanks for this :-)

[MatthewL]

Glad it worked ok for you, a few of our teams use it for MFA bits if no work mobile.