Secure Authentication Series

EMGRAFT MFA + AAA

MULTI FACTOR AUTHENTICATION &

AUTHENTICATION, AUTHORIZATION AND ACCOUNTING SOLUTIONS

All About Mobility and Dynamic Security

Identify True Users

Grant access to classified information to true users with a user friendly and configurable policy.

Authentication For Different Server

Flexible and robust design for different server for greater operation.

Audit Record

Perform Audit with detailed information of log trails, event, token used and all other authentication process.

Enforce Password Policy Using MFA

Whether it's mobile or hardware token, Emgraft MFA & AAA can do PIN Code via SMS, email, Telegram, Soft Token and more.

Why Emgraft MFA & AAA

Authentication for different types of servers

Radius.
PAM (Supporting offline OTP).
Apache2.
Wordpress.
And more.

Enable authentication of users from different databases

SQL databases.
OpenLDAP.
Active Directory.
SCIM Servers.

Two (2) step verification methods using MFA

PIN code via SMS.
PIN code via email.
PIN code via Telegram mesanger.
Soft Token or Push Token.
x509 Certificate Token.

EMGRAFT MFA has a number of features which are commonly found in RADIUS servers, and additional features which are not found in any other free software server.

Highlights

The Emgraft MFA & AAA deployment is designated as EMGOS for operational system identification
Complete support for RFC 2865 and RFC 2866 attributes, along with a Vendor-Specific Attributes
Authorization types are some of the methods which are supported:
- AD, LDAP, MySQL DB, PostgreSQL DB, Oracle SQL DB, IBM's DB2
Authentication types are some of the methods which are supported:
- Clear-text password in local configuration file (PAP)
- Encrypted password in local configuration file.
- CHAP, MS-CHAP, MS-CHAPv2.
- Authentication to a Windows Domain Controller (via ntlm_auth and winbindd).
- LDAP (PAP only).
- Kerberos authentication.
- X9.9 authentication token (e.g. CRYPTOCard).
- PEAP, EAP-FAST, EAP-TTLS, with embedded authentication methods.

Emgraft MFA & AAA in Action

MULTI FACTOR AUTHENTICATION &AUTHENTICATION, AUTHORIZATION AND ACCOUNTING SOLUTIONS

Emgraft MFA +AAA which is a Multi Factor Authentication (MFA) and “Authentication, Authorization and Accounting” is designed to protect and verify user data and credentials to access confidential data and implement SSO to sensitive application as password word is the first layer of defense in an infrastructure.

Challenges

The existing authentication system is not compatible with the application which poses a security weakness in data leak and cybersecurity attacks.
Organization has no secure way of verifying true users to access confidential data.
User password can be shared to other users over conversation.
User may use common, default and predictable password.
Attacker may install bugging program to record keystrokes the user enters.

Without AAA, a network must be statically configured to control access, IP addresses must be fixed, systems cannot move, and connectivity options should be well defined. Even the earliest days of dialup access broke this static model, thereby requiring AAA. Today, the proliferation of mobile devices, diverse network consumers, and varied network access methods combine to create an environment that places greater demands on AAA.