An organization may have multiple users accessing the MasterBase® MB4 and MBA platforms. In this context, authentication does not depend solely on the decisions made by each user; it may also require common conditions for accounts associated with the organization’s domains.
Through Domain Access Manager (DAM) Configurations associated with a domain are managed. In the case of MFA, these configurations determine which methods accounts on the MB4 and MBA platforms associated with that domain can use, and whether having at least one of them will be a requirement for access.
What is Domain Access Manager (DAM)?
Using Domain Access Manager (DAM) manages configurations associated with a domain. With this new capability, MasterBase® makes this management feature available to domain owners so they can set the multi-factor authentication requirements that apply to MB4 and MBA platform accounts associated with their domains.
Currently, configuration is done manually through support.
What is MFA?
MFA (Multi-Factor Authentication) It is an authentication mechanism that uses more than one factor to verify a user's identity when accessing an account.
Instead of relying solely on a password, the login process includes an additional verification step.
This principle was previously discussed by MasterBase® in the article «Two-Step Authentication (2FA): An Extra Layer of Security That Makes All the Difference,» where we explained how a second verification step adds an additional layer to the authentication process.
For MB4 and MBA platform accounts associated with a domain, the MFA methods that can be enabled are Yubico and Authenticator.
What the domain owner can define
Using DAM, the domain owner can set two MFA requirements for users of the MB4 and MBA platforms associated with that domain.
The first step is to determine which MFA methods will be allowed. Available options include Yubico, Authenticator, and email OTP.
The second is to determine whether it will be mandatory to have at least one MFA method configured in order to log in to the MB4 and MBA platforms.
In this way, the organization can establish a common authentication policy for the MB4 and MBA platform accounts associated with its domains, rather than leaving that decision solely up to each user.
A configuration for the MB4 and MBA platforms
This setting applies to accounts on the MB4 and MBA platforms associated with the domain.
It does not alter the native capabilities of the MB4 and MBA platforms. What it manages are the authentication requirements that accounts accessing these platforms must meet.
From Individual MFA to Domain-Based Control
MFA adds an additional verification step to the authentication process. What's new is that MasterBase® allows you to configure, at the domain level, the conditions under which MFA is used to access the MB4 and MBA platforms.
Currently, this configuration is managed through support. The planned update will allow the domain owner to verify their control over the domain and manage these options directly through an interface.
Contact a sales representative →
