How to enable 2 factor authentication in Adobe campaign Fat client using Federated ID?

[Sonika]

Hello Adobe campaign Devs,

In Adobe campaign, we are aware that :

Federated ID is a system that allows users to access multiple applications or systems using a single set of login credentials. In the context of Adobe Campaign, it means that you can use the same username and password to access Adobe Campaign as well as other connected systems without having to create separate accounts for each one. 

And when it comes to 2 factor authentication, it is an extra layer of security that helps protect your account from unauthorised access so in general we set password and some sort of security question or OTP.

I have a requirement to Implement 2FA based on Federated ID for AC Fat Client access, I want to understand prerequisites for achieving this and how to achieve this. Any pointers @AdobeCampaignDev , @adobecampaign , @adobecampaign1 ?

Thanks & Regards,

Sonika

[aggabhi · Accepted solution]

Hi @Sonika ,

As per my understanding adobe campaign classic do not directly support 2FA based on FID. 

 I would implement Federated login using whatever SAML2 directory you have in your organisation and then require MFA via that. In the case of Azure, you aren't usually required to provide MFA for each login but at regular intervals to validate your security token.

There may be a way to require 2FA per federated login but that feature would probably lie with the directory provider.

https://helpx.adobe.com/au/sign/using/enable-saml-single-sign-on.html

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-single-sign-on-setti...