MFA Options For Shared Workstations

Question

Hello,

I have been tasked to rollout MFA for our organization. For users that have an assigned laptop or desktop the solution is to use multi-factor unlock. However, I set a set of users that use a shared workstation. The number of users on a stations exceeds 10 users, they cannot have a cell phone on them, the PCs cannot have a camera, the PC is in a cabinet so using something like an YUbiKey would not work. Can you tell me what options I have to resolve the shared workstation issue?

Answer 1

Given the constraints of the workstation cabinets, mounting an external reader could be a viable solution.

• USB Extensions for Security Keys: If you prefer using security keys like YubiKeys, consider installing USB extension cables that run from the inside of the cabinet to an externally-mounted USB port. This setup allows users to easily insert their YubiKeys without direct access to the PC.

Alternatively

• External Smart Card Readers: These can be attached outside the cabinet, allowing easy access for users to swipe their smart cards without needing to access the enclosed PC.
• External RFID Readers: Similar to smart card readers but using RFID technology, these can be mounted on the cabinet’s exterior. Users would simply tap their RFID badges near the reader to authenticate.