How Two Factor Authentication works

Here at The Bunker, our approach is always collaborative. Our VPN 2FA service provides your users with 3 things: software or hardware authentication tokens, a digital certificate and a private key. The user has a unique password and pin (which only they know) which are entered when connecting to the VPN; the password unlocks the private key and starts the software, while the pin generates a One-Time Password (OTP) to send authentication to the managed identity provider through an IPSec encrypted RADIUS connection. The software/hardware token is synchronised using the Time-based, One-Time Password (TOTP) algorithm. Upon successful verification the user is allowed access to the VPN and your private systems.

Our Opensource identity and access management software provides you with Single Sign On (SSO) to all of your applications and services. Users are redirected to The Bunker’s Identity Provider (IdP) system and login using a username and password. They will then be required to enter an OTP via an authentication application which would have been already configured with the TOTP algorithm. The user is issued a cryptographically signed authentication token, the application performs verification of the token and the user is granted access.