Dual Factor Authetication for Remote Apps

[mattianuk]

I am looking to deploy SIMs access via HAP and remote apps.

 

Just been told I need to get dual factor authetication. I have been told this is the law(?) - when I thought it was just county suggesting it.

 

Regardless - has anyone got any views on this? Obviously they have their HAP password and then SIMs password to enter to get access, but that isnt dual factor...

 

So does anyone have any views on the security aspect, and then any views on any potential solutions?

 

Thanks

[plexer]

It's the LAW !!!!! ask them for a link to the relevant legislation.

 

Ben

[mattianuk]

Right, so if it is law - why can I find no mention of what anyone else uses!!

[Firefox]

We use "dual factor" or 2 factor authentication. This normal comprises of a remote access fob linked together with the users domain credentials.

 

Like yourself though I wasn't aware of this being any law....surely if a company had no care about their data they could have no authentication?

 

EDIT: sorry you mean law, relating to the SIM application...sorry have never used this, but assuming it holds school data - possibly

Edited October 24, 2012 by Firefox

[mattianuk]

What do you use please?

[Firefox]

We publish our applications via UAG, and use a Freyer device to authenticate fobs that have been distributed to users. These fobs are linked to their accounts in AD. They are also then required to input their AD credentials. Without both part of the login access is not granted