MFA?

[Kyle Stewart (kylestewart)]

Hello!

I'm trying to figure out whether I would be able to add a custom MFA solution to this. Is there PAM support built-in? Or another way we can do it?

[Tess Gauthier (tgauth)]

PAM is unsupported at this time, unfortunately!

[Kyle Stewart (kylestewart)]

Ah, bummer! Thank you for your response!

[Bryan Berns (NoMoreFood)]

If you're talking about a hardware token, you can use OpenSSH's PKCS or FIDO support. Those work on the Windows client. You could also use OpenSSH for Windows Server on the backend and something like PuTTY CAC if you're looking for something more "user friendly".

[Kyle Stewart (kylestewart)]

Good advice, thank you!