Datto Autotask PSA: Can I use Two-Factor Authentication (2FA) and Single Sign-On (SSO) at the same time?

Follow

Question

If I have both Two-Factor Authentication (2FA) and Single Sign-On (SSO) enabled for my environment simultaneously, will the configuration be compatible with Datto Autotask PSA?

Environment

  • Datto Autotask PSA

Answer

Yes, it is compatible. However, in a scenario where a user account has both SSO and 2FA enabled, PSA will bypass the 2FA authentication and the user will not receive a prompt to enter their OTP.

This behavior is due to the authentication process being carried out on the Identity Provider (IdP) side, rather than on the PSA side.

As a result, you do not need to disable 2FA for a user with both authentication methods enabled.

For more information about the authentication workflows for Single Sign-On, see our Datto Autotask PSA: Logging in with Single Sign-On (SSO) to PSA, LiveMobile, or the Microsoft Outlook Extension article.


Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Community Forum or get live help.