{"id":6195,"date":"2018-02-27T09:50:08","date_gmt":"2018-02-27T15:50:08","guid":{"rendered":"http:\/\/www.filecloud.com\/blog\/?p=6195"},"modified":"2023-05-01T01:51:54","modified_gmt":"2023-05-01T06:51:54","slug":"duo-security-with-filecloud","status":"publish","type":"post","link":"https:\/\/www.filecloud.com\/blog\/duo-security-with-filecloud\/","title":{"rendered":"Duo Security Integration with 2FA for Enterprises | FileCloud"},"content":{"rendered":"
<\/p>\n
\u00a0<\/p>\n
You\u2019ve probably been investigating 2-Factor Authentication (2FA) more recently. With each new data breach in the news, you increasingly realize that security doesn\u2019t end with strong passwords.<\/p>\n
Two Factor Authentication,\u00a0\u00a0also known as 2FA,\u00a0 is a two-step verification method that requires a username\/password and the second method of verification. Duo is a cloud-based SaaS service that can authorize 2FA across any organization. Duo simplifies the management of end users and their 2FA devices. This support allows FileCloud 2FA management via DUO for clients who already use DUO to manage their other enterprise applications.<\/p>\n
FileCloud is trusted by 1,000s of organizations to store critical files and data. Since\u00a0FileCloud deals with mission-critical business data, we consider security as the most important vector. FileCloud already offers 2FA through Google and mail authentication. With our new version of FileCloud, you can integrate with Duo to offer 2FA and enhance the security when users access FileCloud. \u00a0Duo adds an extra layer of protection to your FileCloud account.\u00a0 Once enabled, FileCloud will require a passcode in addition to your user id\/password whenever you log in to FileCloud.<\/p>\n
What is 2FA? <\/strong><\/h2>\n
2FA adds an extra layer of protection to user logins by combining the use of \u201csomething you know\u201d (your login credentials and password) and \u201csomething you possess\u201d (One Time Passcode).\u00a0 Many consumer emails and online banking applications now incorporate this additional layer of account security. For most applications using 2FA, it is most common for users to retrieve a passcode from their cell phone, smartphone,\u00a0 or another smart device in order to access their account.<\/p>\n
While SSO is convenient for users, it presents new security challenges. If a user\u2019s primary password is compromised, attackers may be able to gain access to multiple resources. In addition, as sensitive information makes its way to cloud-hosted services, it is even more important to secure access by implementing two-factor authentication.<\/p>\n
Are text-based 2FAs enough?<\/strong><\/h2>\n
The problem with 2FA is that often a distinction isn\u2019t made between SMS-based 2FA, which sends a code to the user via text, and 2FA that requires a user to respond to a push verification sent to a specific physical device.<\/p>\n
Text-based 2FA spreads out the potential attack surface. Instead of a code being sent to one place \u2014 like a purpose-built smartphone app or a separate authenticator device \u2014 it\u2019s distributed throughout a set of services that might have their own vulnerabilities. A true two-factor authentication, the good kind, sends a verification prompt to one place: the device you\u2019re holding in your hand.<\/p>\n
Duo Security and how it works with FileCloud <\/strong><\/h2>\n
We know that the most effective security solution is one your users actually use. Duo is an industry leader that provides users with multiple options to gain access to their account using 2FA. Duo\u2019s 2FA solution only requires our users to carry one device \u2013 their phone, with the Duo Mobile app, installed. Duo Mobile is available for iPhones, Androids and more.\u00a0Duo makes it very simple to protect many different apps due to their Auth API \u2013 as long as the apps support Duo. Once you have an Enterprise Plan of Duo, you can protect any sign-in process of on-premises and cloud apps.<\/p>\n
FileCloud can be set up to use Duo security service to perform 2FA. After integrating Duo with FileCloud, users will need to install Duo app on their smart device which will provide them with the passcode. Users will, therefore, require using their ID, password and the passcode generated to log in to their FileCloud account. With this added security, your employees can collaborate and store files in this encrypted cloud drive, share data securely within the network or with outsiders, and much more. With the additional Duo 2FA enabled, your business data is protected at the highest possible security level with FileCloud.<\/p>\n
Here\u2019s how you can integrate Duo with FileCloud<\/h3>\nIntegrate Duo with FileCloud<\/figcaption><\/figure>\n\n
Add Duo Auth API<\/li>\n<\/ol>\n
Get integration key, secret key, and API hostname using Duo here<\/a><\/p>\n
![\"\"](\"https:\/\/www.filecloud.com\/blog\/wp-content\/uploads\/2018\/02\/FilecloudDuo1.png\")
<\/p>\n![\"Integrate](\"https:\/\/www.filecloud.com\/blog\/wp-content\/uploads\/2022\/04\/duo2.png\" "\\"Integrate")
![\"Add](\"https:\/\/www.filecloud.com\/blog\/wp-content\/uploads\/2022\/04\/duo3.png\" "\\"Add")
![\"Duo](\"https:\/\/www.filecloud.com\/blog\/wp-content\/uploads\/2022\/04\/duo1.png\" "\\"Duo")
![\"Duo](\"https:\/\/www.filecloud.com\/blog\/wp-content\/uploads\/2022\/04\/2018-01-04_09h21_19.gif\" "\\"Duo")