{"id":84273,"date":"2023-06-05T13:11:35","date_gmt":"2023-06-05T17:11:35","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=84273"},"modified":"2024-04-04T14:52:03","modified_gmt":"2024-04-04T18:52:03","slug":"configure-mfa-for-org","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org","title":{"rendered":"Configure TOTP MFA for Your Org"},"content":{"rendered":"\n<p>Use Multi-Factor Authentication (MFA) with JumpCloud to secure user access to your organization\u2019s resources. Configure TOTP MFA to guard the User Portal, RADIUS servers, the Admin Portal, and user devices.&nbsp;<\/p>\n\n\n\n<p><strong>Considerations<\/strong>:<\/p>\n\n\n\n<ul>\n<li>TOTP cannot be disabled for device and RADIUS server authentication.<\/li>\n\n\n\n<li>If TOTP is disabled for your org, you must have JumpCloud Protect Mobile Push or Duo Security MFA enabled.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>Give your users secure and convenient access to their resources with <a href=\"https:\/\/jumpcloud.com\/support\/configure-push-mfa\">JumpCloud Protect<\/a>.&nbsp;You can also secure user access to resources with Duo MFA and WebAuthn MFA. See <a href=\"https:\/\/jumpcloud.com\/support\/mfa-for-admins\" target=\"_blank\" rel=\"noreferrer noopener\">MFA Guide for Admins<\/a>&nbsp;to learn more.&nbsp;<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">About JumpCloud TOTP MFA<\/h2>\n\n\n\n<p>JumpCloud TOTP MFA uses authenticator codes called Time-based One-Time Password (TOTP) tokens. After TOTP MFA is configured for a user, that user is required to enter a TOTP token when they log in to a JumpCloud resource that is protected by TOTP MFA. Each user is set up independently, and has their own TOTP tokens. A TOTP application generates tokens for users, generally from a mobile device. Any application that can generate a six-digit SHA-1 based TOTP token can be used with JumpCloud TOTP MFA. Some apps qualified to work with JumpCloud are:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/jumpcloud.com\/support\/jumpcloud-protect-for-admins\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Protect<\/a><\/li>\n\n\n\n<li><a target=\"_blank\" href=\"https:\/\/support.google.com\/accounts\/answer\/1066447\" rel=\"noreferrer noopener\">Google Authenticator<\/a><\/li>\n\n\n\n<li><a target=\"_blank\" href=\"https:\/\/duo.com\/product\/trusted-users\/two-factor-authentication\/duo-mobile\" rel=\"noreferrer noopener\">Duo Mobile<\/a><\/li>\n\n\n\n<li><a target=\"_blank\" href=\"https:\/\/freeotp.github.io\/\" rel=\"noreferrer noopener\">FreeOTP<\/a><\/li>\n\n\n\n<li><a target=\"_blank\" href=\"https:\/\/www.yubico.com\/support\/knowledge-base\/categories\/articles\/how-to-use-your-yubikey-with-authenticator-codes\/\" rel=\"noreferrer noopener\">Yubico Authenticator<\/a>&nbsp;for Desktop (for use with YubiKey)&nbsp;&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"resource\">TOTP MFA Resource Availability<\/h2>\n\n\n\n<p>TOTP MFA resource protection is available on the following JumpCloud-managed resources:<\/p>\n\n\n\n<ul>\n<li>User Portal login<\/li>\n\n\n\n<li>Windows login<\/li>\n\n\n\n<li>Mac login<\/li>\n\n\n\n<li>Linux SSH login<\/li>\n\n\n\n<li>SSO\/SAML application login<\/li>\n\n\n\n<li>RADIUS VPN networks<\/li>\n\n\n\n<li>Admin Portal login*<\/li>\n<\/ul>\n\n\n\n<p>After a user configures TOTP MFA, they are required to enter a TOTP token for any TOTP MFA-protected resource. For example, if TOTP MFA is enabled for a Linux server, and User A has completed TOTP MFA setup, they are prompted for a TOTP token when they sign in to the protected Linux server. If User B hasn&#8217;t completed TOTP MFA setup, they aren&#8217;t prompted when signing into the same Linux server.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Users can authenticate into their local account without internet access, and TOTP MFA will still be enforced in this situation.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>*Admin Portal TOTP MFA protection follows a separate MFA enrollment process.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"preparing\">Preparing Your Users<\/h2>\n\n\n\n<p>We advise admins to educate their users before enabling TOTP MFA to prevent potential confusion over the change in their user workflow.<\/p>\n\n\n\n<ul>\n<li>After an admin enables JumpCloud TOTP MFA for a user, the user receives an email notifying them they are now required to use TOTP MFA, and tells them how long they have to enroll in TOTP MFA before the TOTP token is required to log in to the User Portal and other protected resources.<\/li>\n\n\n\n<li>Users can follow the link in their setup email, or can log in to the User Portal to start TOTP setup. The setup wizard gives them a TOTP key and QR code to scan with a qualified TOTP app.<\/li>\n\n\n\n<li>After a user configures TOTP for their account, the JumpCloud User Portal requires username, password, and TOTP Token to log in. Users are also prompted for a TOTP token when logging in to any other resources protected by TOTP MFA, such as RADIUS and their device.\u00a0<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>TOTP attempts are not unlimited. Allowed number of user attempts is set by the IT Admin; &nbsp;admin attempts are limited to five. If settings are selected, that will count toward password or MFA attempts.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Learn more<\/strong>:&nbsp;<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/jumpcloud.com\/support\/require-mfa-for-users\" target=\"_blank\" rel=\"noreferrer noopener\">Require MFA for Users<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Viewing the Status of User TOTP Enrollment<\/h2>\n\n\n\n<p>On the Users page, use the Columns dropdown to add the <strong>MFA: TOTP<\/strong> and <strong>MFA: User Requirement<\/strong> columns to confirm which users have completed TOTP enrollment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Setting Up TOTP MFA<\/h2>\n\n\n\n<ol>\n<li>Review&nbsp;<a href=\"#resource\">TOTP MFA Resource Availability<\/a>&nbsp;and&nbsp;<a href=\"#preparing\">Preparing Your Users<\/a>.<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-totp-mfa-for-user-accounts\" target=\"_blank\" rel=\"noreferrer noopener\">Configure TOTP MFA for User Accounts<\/a>.<\/li>\n\n\n\n<li>Understand the <a href=\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa\" target=\"_blank\" rel=\"noreferrer noopener\">User Workflow with MFA<\/a>.<\/li>\n\n\n\n<li>Enable MFA for&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/authenticate-to-radius-with-mfa\" target=\"_blank\" rel=\"noreferrer noopener\">RADIUS<\/a>&nbsp;and&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/enable-totp-mfa-for-devices\" target=\"_blank\" rel=\"noreferrer noopener\">Devices<\/a>.<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/enable-mfa-for-the-admin-portal\" target=\"_blank\" rel=\"noreferrer noopener\">Enable MFA for the Admin Portal<\/a>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Use Multi-Factor Authentication (MFA) with JumpCloud to secure user access to your organization\u2019s resources. Configure TOTP MFA to guard the [&hellip;]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2908,2854],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configure TOTP MFA for Your Org - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to configure MFA for securing user access to your org&#039;s resources.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure TOTP MFA for Your Org\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure MFA for securing user access to your org&#039;s resources.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-04T18:52:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"pamkellman\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org\",\"url\":\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org\",\"name\":\"Configure TOTP MFA for Your Org - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:11:35+00:00\",\"dateModified\":\"2024-04-04T18:52:03+00:00\",\"description\":\"Learn how to configure MFA for securing user access to your org's resources.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Configure TOTP MFA for Your Org\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Configure TOTP MFA for Your Org - JumpCloud","description":"Learn how to configure MFA for securing user access to your org's resources.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org","og_locale":"en_US","og_type":"article","og_title":"Configure TOTP MFA for Your Org","og_description":"Learn how to configure MFA for securing user access to your org's resources.","og_url":"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org","og_site_name":"JumpCloud","article_modified_time":"2024-04-04T18:52:03+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"pamkellman"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org","url":"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org","name":"Configure TOTP MFA for Your Org - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:11:35+00:00","dateModified":"2024-04-04T18:52:03+00:00","description":"Learn how to configure MFA for securing user access to your org's resources.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/configure-mfa-for-org"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Configure TOTP MFA for Your Org"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/84273"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/206"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/84273\/revisions"}],"predecessor-version":[{"id":108534,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/84273\/revisions\/108534"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=84273"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=84273"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=84273"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=84273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}