GOOGLE AUTHENTICATOR QR CODE HOW TO
GOOGLE AUTHENTICATOR QR CODE REGISTRATION

The Reset User(s) field in the User management section is used to reset the token that a user receives when they log in to Parallels RAS for the first time using Google Authenticator.

Expand the drop-down box and select one of the predefined values (number of seconds). Using the TOTP tolerance drop-down box, you can select a time difference that should be tolerated while performing authentication. The synchronization must be performed against a global NTP server (e.g. When using Time-based One-Time Password (TOTP), it is required to have the time synchronized between the RAS Publishing Agent and client devices.

The Authentication section allows you to configure TOTP tolerance.

This is a security measure to mitigate users with compromised credentials to enroll in MFA. When you restrict or disable enrollment, Google authenticator or other TOTP provider can still be used, but with added security which would not allow further user enrollment. If enrollment is disabled due to expired time frame or because the Do not allow option is selected, a user trying to log in will see an error message saying that enrollment is disabled and advising the user to contact the system administrator. You can allow all users to enroll without limitations (the Allow option), allow enrollment until the specified date and time ( Allow until), or completely disable enrollment (the Do not allow option).

The User enrollment section allows you to limit user enrollment via Google Authenticator if needed.

Technically, you can use any authenticator app (hence the ability to change the name), but at the time of this writing only the Google Authenticator app is officially supported. If you change the name, the sentence will contain the name you specify, such as 'Install app on your iOS or Android device'.

GOOGLE AUTHENTICATOR QR CODE REGISTRATION

The name will appear on the registration dialog in Parallels Client in the following sentence, 'Install Google Authenticator app on your iOS or Android device'.

Type Name: The default name here is Google Authenticator.In the Google Authenticator Properties dialog that opens, specify the following options:.In the Provider drop-down list, select Google Authenticator.In the Parallels RAS Console, navigate to Connection / Multi-factor authentication.

GOOGLE AUTHENTICATOR QR CODE HOW TO

This section explains how to use Google Authenticator as a second-level authentication solution in Parallels RAS.

Google authenticator qr code