2FA…

[RossCummings]

So I work for an MSP where multiple technicians need access to various accounts with 2FA enabled. Apple School Manager for example we had set to technicians mobile numbers but if they were off work it became unusable, and we can’t have our helpdesk landline being clogged.

So we went for an SMS to email service, but this is constantly up and down which screws us getting into accounts at times.

How do you guys do it? Is there lots of SMS to email platforms out there and we can only find one (won’t name the company), or is there some other way I’m not seeing?

Thanks In advance!

[Steve21]

We use the helpdesk number as the backup

 

As it's a hunt-group between all staff members phones it shouldn't get clogged up unless you have every single tech ringing a 2FA at once and even if that's the case then they probably wouldn't be answering another call

 

Steve

[timbo343]

So I work for an MSP where multiple technicians need access to various accounts with 2FA enabled. Apple School Manager for example we had set to technicians mobile numbers but if they were off work it became unusable, and we can’t have our helpdesk landline being clogged.

So we went for an SMS to email service, but this is constantly up and down which screws us getting into accounts at times.

How do you guys do it? Is there lots of SMS to email platforms out there and we can only find one (won’t name the company), or is there some other way I’m not seeing?

Thanks In advance!

This there a way to use something like Google Authenticator? You can usually get the key off the QR code, save it and share it between your techs.

[dmj]

Checkout Bitwarden. It should solve this issue as you can share credentials between staff. Pay or self host.

[Arthur]

This there a way to use something like Google Authenticator? You can usually get the key off the QR code, save it and share it between your techs.

Checkout Bitwarden. It should solve this issue as you can share credentials between staff. Pay or self host.

That would require Apple to support TOTP codes (which annoyingly they don't).

 

https://support.apple.com/en-gb/HT204915

 

However as of macOS Ventura 13.2 and iOS/iPadOS 16.3, Apple supports USB security keys for Apple IDs (a long overdue feature!)...

 

https://support.apple.com/en-us/HT213154

 

Security Keys for Apple ID is an optional advanced security feature designed for people who want extra protection from targeted attacks, such as phishing or social engineering scams.

 

With two-factor authentication — which is designed to make sure that you're the only one who can access your Apple ID account — you need to provide two pieces of information to sign in with your Apple ID to a new device or on the web.

 

The first piece of information is your Apple ID password.

 

• A security key can act as the second piece of information, instead of the six-digit verification code that is normally used.
  
• Because you use a physical key instead of the six-digit code, security keys strengthen the two-factor authentication process and help prevent your second authentication factor from being intercepted or requested by an attacker.
  

[brianhig]

Well, if SMS to email doesn't work well for you, you can try and use online SMS verification tools. These can also help you solve your clogging problem. I can recommend AnonymSMS for 2FA. I've used it a few times to get codes from some sites where I didn't want to use my phone number. It worked fast and the best thing is that it's completely free. Edited March 14, 2024 by brianhig