Multi-Factor Authentication Evaluation Guide.pdf

This document provides IT admins with an overview of miniOrange MFA, including the architecture, key features, use
cases, deployment options, customer success stories and other essential resources to help admins/decision makers
start their evaluation of miniOrange.

1. Multi-Factor Authentication
Evaluation Guide
A Comprehensive MFA Guide for Your Workforce Identity
www.miniorage.com

2. Table of  Contents
1.miniOrange MFA Overview
2.MFA Methods Supported
3.Features & USPs
4.Popular Use cases
5.MFA Architecture : Radius & Windows Authentication Flow
6.Know the Difference
7.Customers & their Success Stories
8.Recognition on Review Platforms
9.Other Products
10.About miniOrange

3. miniOrange MFA Overview
1 This document provides IT admins with an overview of miniOrange MFA, including the
and other essential resources to help admins/decision makers
start their evaluation of miniOrange.
architecture, key features, use
cases, deployment options, customer success stories
1 MFA is a security measure that requires users to pass two distinct authentication methods: something you know (like a
password) and something you possess (like a smartphone or biometric data). This extra layer of protection makes
unauthorized access more difficult and helps guard against phishing, social engineering, and brute-force attacks.
1 miniOrange allows users, employees, and organizations to enable 2FA for their
This allows employees to securely access their work
without repeatedly entering credentials, while businesses maintain full control over every login.
cloud, on-premise, mobile, in-house,
legacy apps, VPNs, Windows, Linux, MAC and website accounts.
For more information about visitMFA,

4. MFA Methods Supported
[ Knowledge Factor]
Something you know
[ Possession Factor]
Something you have
[ Inherence Factor]
Something you are
Password
Security Questions
PIN/Sequence
Secret Fact
Mobile Phone
Hardware Token
Wearable Device
Token
Fingerprint
Face Recognition
IRIS Format
Voice Pattern
miniOrange Supports following MFA Methods:
s wogtSwcltrFeltgepptudlMtuFloththd eeFA
s eeFAdhthteFcKtowr[lcrFterFuctgoutlpp
s wogtwFlotg[ucltreAA
s auunAldtFtoupuurdowr[ydeFcFwoecnltowr[lcrFteruo
s rwhFulydmFpyAeytouKlc
s hltwoFrytowlprFucp
s NFuelroFttowr[lcrFterFucteunFctecdteuol
For more information about visitminiOrange MFA methods,

5. Features & USPs
Features
Zero Trust Authentication
Zero Trust approach within 2FA
helps to create an effective
environment, policies, and
infrastructure to minimize data
breaches.
Role Based 2FA
Admin can enable or disable
2FA for a specific user role and
for any particular application.
Offline Authentication
Allow users to log in even if
there is no internet available
by using Offline 2FA method
such as soft token and security
questions.
Custom SMS/EMAIL Gateway &
Templates
Templates for SMS and email
which are sent to users
containing OTP for
authentication are also
completely customizable.
?A??Ay'p?Ayp?AAAipd?
On premise
Flexible Deployment Options:
On-Premise & Cloud.
Seamlessly integrates into
your organization's existing
environment.
User Self Enrollment
It offers inline registration of
users, so you'll simply activate
and setup 2FA, and you're
ready.
Passwordless Authentication
2FA login for users using just
Username and OTP/TOTP, thus,
preventing the need to enter
Password.
Reporting and Auditing
Stay informed on all user
logins. Get complete reports
on all user activities in a single
dashboard: session
management, user monitoring,
user login audit, user & admin
activity reports, etc.

6. Features & USPs
USPs
VPN 2FA Without RADIUS Proxy
Implement 2FA for your VPN effortlessly
without the need for separate RADIUS
proxy modules.
Secure non-domain joined machines
Implement single MFA for non-domain
joined machines with generic usernames,
supporting cross-domain logins for
accounts on any trusted domain or local
Windows accounts.
Branding / Customization
We provide customization on our
products which are platform
independent, and they can be easily
accessed by an end user.
API Integration
You can use our MFA APIs to integrate
additional security into your applications on
any device that supports a web-Browser.
No need to install an external proxy for MFA
No need to install an external proxy for MFA
on your network infrastructure [Wi-Fi, VPNs,
Routers, Network Switches, Firewalls, etc.]

7. Popular Use cases
1. MFA for VPN
Seamless integration with major gateways and VPN providers
like Fortinet, Cisco, Palo Alto Networks & more. Secure remote
access both on the cloud and on-premise, providing consistent
policy enforcement & security controls for your remote or hybrid
workforce.
2. MFA for Windows/Linux/MAC
Secure Microsoft Windows logon, Remote Desktop Web Access (RD Web), and
Remote Desktop Protocol (RDP) by preventing password-based attacks and
deterring unauthorized access. 2FA extends beyond Windows to Linux, where
it integrates with SSH and CentOS, and to MacOS with options like Jamf
Connect and JAMF Pro.
3. MFA for Legacy and Custom Applications
Add 2FA without a separate development project by using
miniOrange's no-code approach, saving time and resources.
Secure legacy applications such as Oracle EBS, QlikView,
PeopleSoft, and Siebel CRM, as well as custom apps built with
PHP, .NET, React, Angular, or Node.js
4. MFA for Web/Inhouse Apps
Enhances MFA security across Cloud (SAAS), On-Premises, and In-House
apps, supporting protocols like SAML, Radius, OpenID, and JWT. Integrate
seamlessly with inhouse apps offering features like Passwordless
Authentication, Role-Based 2FA, and Biometric Authentication.

8. Popular Use cases
5. MFA Over Switches and Routers
Add MFA to network infrastructure using RADIUS and TACACS+
protocols, encrypting devices based on hardware capabilities.
This includes securing Firewalls, wifi, switches, and routers with a
centralized system.
6. MFA for Legacy and Custom Applications
Add 2FA without a separate development project by using
miniOrange's no-code approach, saving time and resources.
Secure legacy applications such as Oracle EBS, QlikView,
PeopleSoft, and Siebel CRM, as well as custom apps built with
PHP, .NET, React, Angular, or Node.js
Popular 2FA Examples

9. Authentication process using a RADIUS server
The process begins with a
login request from the user,
which is first handled through
primary authentication with
the designated authentication
source (e.g., Active Directory,
Azure AD, miniOrange). Upon
successful primary
authentication, a secondary
authentication step occurs
using 2FA methods like OTP,
biometric, or push
notifications. Once both
authentication steps are
successfully completed, the
user is granted access.

10. Users enter their username
and password into the
Windows logon/RDP module.
An HTTP request is then sent to
the miniOrange Identity Server
to check the user's 2FA policy.
After confirming the policy
and available MFA methods,
the user selects their preferred
MFA option. Once the MFA
passcode is successfully
entered or the chosen MFA
method is completed, a
validation status response is
sent back to the miniOrange
Identity Server. If both primary
and secondary authentication
steps are validated, access is
granted to the user.
Authentication process into the Windows
logon/RDP module

11. Feature miniOrange DUO Azure Entra ID Jump Cloud
SSO, MFA & Risk-based
Authentication Capabilities
Authentication for Network
Devices (RADIUS/TACACS+)
A single solution delivering
both SSO,MFA & Risk-based
Authentication for SaaS,
Legacy & On-Premise
apps.
Authentication is supported
via externalsources like
Entra ID (Azure AD),
onpremise AD, or
miniOrange.
For authentication, on-
premise AD is mandatory.
While the authentication for
Radius is available, does
not support network
devices
Complex Radius Server
Setup. Limited support for
MFA over Networking
Devices.
Do not provide SSO/MFA/
Risk based Authentication
capabilities in a single
solution. You need to buy
multiple products like Cisco
ISE for conditional access
policies.
No support for In-house
applications.
Majorly supports SAML &
LDAP protocol and partially
supports other protocols
like RADIUS or OAuth.
Why Choose miniOrange?
Total Cost of Ownershie
(TCO)
A cost-effective solution,
providing more features at
competitive pricing. Hence,
Total Cost of Ownership
(TCO) is low.
Pricing is usually higher
with respect to the features
provided.  Hence, resulting
in increasing TCO.
Pricing is usually higher
with respect to the features
provided.  Hence, resulting
in increasing TCO.
Pricing is usually higher
with respect to the features
provided.  Hence, resulting
in increasing TCO.

12. VGDn4252yKS6YvwMlv(
Features
Feature parity between
both on-premise& cloud
solutions. A fully on-
premise solution is also
available.
They mostly provide hybrid
solutions. Complete on-
premise solution is not
available.
Only the cloud deployment
option is available
Focus only on cloud
solutions and have
limitations over on-premise
solutions.
MFA Methods
15+ MFA methods are
supported
includin7
1. Mobile authenticator
2.Push Notification
3.SMS
4.Emai
5.Call
6.QR code verification
7.Windows Hello
8.FIDO2 Security Keys
9.Web Authn
10.Biometric
11.Display Token
12.Yubikey Tokens
8 MFA Methods are
supported including
1.Duo Push
2.Web Auth (Biometric)
3.Yubikey Token
4.SMS passcode
5.Call
8 MFA Methods are
AO11ksoh)?
1.Microsoft 2.Authenticator
Authenticator Lite (in
Outlook)
3.Windows Hello for
Business
4.FIDO2 security key
5.OATH hardware token
(preview)
6.OATH software token
7.SMS
8.Voice call
Limited MFA methods are
supported:
1.JumpCloud Go
2.Push Notifications
3.Verification Code (TOTP)
MFA
4.Security Keys
5.Device Authenticator
6.Duo Security MFA
(Does not support
hardware tokens like
Yubikey.)
MFA for macOS
MFA is available for macOS
(both during login & on the
lock screen)
MFA is available for macOS
(only duringlogin)
MFA support is not
available for device or
server logins
Only provides TOTP MFA
method for devices.Does
not support backup
methods.

13. Our Customers
For more information about miniOrange Customers, Visit
www.miniorange.com/customers

14. Other miniOrange Products
Other Products
SSO CIAM PAM Lifecycle Management Adaptive Authentication Identity Brokering
About miniOrange
miniOrange platform is a versatile solution for managing employees & customer identities
and sculpting fruitful user experiences over your digital resources or assets. miniOrange is
proudly serving and has also partnered with
& vendors from the
20,000+ satisfied customers worldwide 200+
global entities United States, the United Arab Emirates, the Netherlands,
UK, India, Singapore, South Africa, Mexico, Brazil & many more.
Delivering diverse solutions around SSO/MFA on various popular marketplaces like
By offering a library of including web, mobile, legacy &
other popular apps, miniOrange is helping organizations optimize their resources & costs to
drive business growth.
WordPress, BigCommerce, Shopify, Atlassian, Drupal, Microsoft, Google, Oracle, Zoom, &
many more. 6000+ app integrations

15. For more information, please visit miniorange.com

miniOrange Support Team:
[email protected]
[phone] (US)  [phone] (India)
Visit us on our Social Media Channels:
www.linkedin.com
www.youtube.com
www.facebook.com