Is there a way to enable two factor authenication on the Manger Account?

[Scott_Johnson3]

I did not see any setting the password policy option to make this change.  Our security supervisor was mostly concern about use of the account on the web client.  Any thoughts would be appreciated.

[AdamShaneHyland]

Hi Scott.

No, there is not.  OnBase user accounts authenticated with OnBase authentication (meaning an OnBase username and password) do not support multi-factor authentication.  The only way to do this would be to link the MANAGER OnBase user account to an account authenticated using one of the authentication providers which support the OnBase IdP (OnBase version 17/18) OR Hyland IdP (OnBase Foundation).  The AD FS (ws-fed) OR SAML providers both support multi-factor authentication.  AD FS does this natively while SAML would rely on an integration for the third party identity provider (an example would be using DUO with Okta).  

Best wishes.

[Ashish_Srivasta]

Just a workaround - If the concern is about use of account on web client and you are not using ONBASE users but only using network authenticated users, you may turn on Domain authentication on web client so only person users can log in. Web client will be autologin enabled and can be used by windows authenticated users, users will not be prompted to enter credentials. For any reasons where you have to use MANAGER account, you can use using one license of OnBase client

Kind Regards,

Ashish Srivastava