Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring TRITON Settings > Configuring two-factor authentication > How does certificate authentication work?
How does certificate authentication work?
TRITON Manager Help | Web, Data, and Email Protection Solutions | v8.0.x
When you enable certificate authentication on the Two-Factor Authentication page, the logon process for an administrator accessing the TRITON Manager URL is as follows:
*
TRITON Manager detects whether a client certificate is installed. If more than one certificate is available, the administrator is asked to select the certificate that allows access to the manager.
*
The administrator provides their two-factor authentication credentials as defined by your organization. For example, this could be through the use of the Common Access Card (CAC) and a card reader.
*
After successful authentication, TRITON Manager receives the client certificate and checks that it matches the signature in the uploaded root CA certificates. If the signature matches, TRITON Manager checks for a full match with the certificates that you have either uploaded to TRITON Manager, or imported from your user directory. If a match is found, the administrator associated with the two-factor authentication credentials is logged on to the manager.
*
If no certificate match is found and you have set up attribute matching as a fallback option, a check is performed to see if the client certificate contains a property matching a specific LDAP attribute in your user directory. If a match is found, the administrator associated with the two-factor authentication credentials is logged on to the manager.
If all configured certificate and attribute matching fails, or if the administrator does not have a client certificate, you can allow password authentication as a fallback option. If password authentication is disabled, administrators without matching certificates cannot log on.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring TRITON Settings > Configuring two-factor authentication > How does certificate authentication work?
Copyright 2016 Forcepoint LLC. All rights reserved.