Reference Guide
Multi-Factor Authentication
Using MFA for HTTP/HTTPS Proxy
single connectâs built in mfa can be used as an enhanced security level for http proxies when opening a web browser, the user is asked for their single connect credentials to connect to the http proxy after the successful log in, and if mfa is activated for http proxy, an mfa token is required when using the single connect desktop client, the mfa token is required when the user opens the webpage to enable mfa for http proxy pre requisite admin and users have the qr code, installed the single connect mobile app, scanned the qr code with the mobile app, and otp is enabled for the user group that will be using mfa for http connections (see sections https //app archbee com/docs/jsymind0w sxaymlkgomr/rtcz2lmpnnq5cvcc0c0qe docid\ e3u2gulcf51dgux s7nh2 , https //app archbee com/docs/jsymind0w sxaymlkgomr/hxrij xtdti9bocp12vm7 docid\ qrhipik cghzw4hrmvxtv , docid\ q04vhhdddgmqe5mojptwf ) establish an ssh connection to single connect as the root user edit the âproxy propertiesâ file with the command vi /u01/http proxy/conf/http proxy properties check the configuration file to see if the parameter below is already configured in it if not, add the lines below if there is a hash (#) sign in front of the parameters, delete the hash (#) sign to activate the parameter if the parameter value is âfalseâ, change it to âtrueâ to type or add anything in the vi editor, first press the insert button on the keyboard, then type in the necessary line press esc to exit typing mode to save the file press esc, then a colon ( ), type in âwq!â and press enter if you do not want to save the changes to the file, press esc, then a colon ( ), then type in âq!â and press enter http proxy otp enabled=true if you wish to define the cache time, also set the parameter below if not set, the cache time default value is 300 seconds http proxy otp cache seconds=120 restart the http proxy with the command systemctl restart http prox after these steps, otp will be required at the next http proxy log in