Access for Infrastructure now supports independent multi-factor authentication (MFA) for SSH connections using YubiKey PIV keys. This adds a hardware-backed second factor to SSH access, ensuring that a compromised device session alone is not sufficient to reach your servers.
With per-application and per-policy configuration, you can enforce PIV key authentication for sensitive usernames (for example, root) while applying different requirements for other usernames. You can also set an MFA session duration to control how often users must re-authenticate.
Enrollment
Users enroll their YubiKey PIV key through the App Launcher. For enrollment instructions and SSH client setup, refer to Enroll a PIV key for infrastructure apps.
Configuration
For setup instructions, refer to Enforce MFA for infrastructure applications.
Source: Cloudflare
Latest Posts
- MC1455035: Power Pages Rolls Out Early Upgrade to Version 9.8.8.5 with Performance and Security Fixes
- MC1455050: Power Platform Adds GitHub Support for Source Code Integration with Enhanced APIs and Performance
- MC1455051: Dynamics 365 Customer Service and Contact Center Adds Workforce Alerts for Intraday Volume Spikes
- Workers, Access – You can now enable Access on a Worker or all Workers at once
