Symantec VIP credential installed on Laptop

[Ahmed.Mamdouh]

customer have to apply MFA for roaming users who having internet access on their laptop but not connected to corporate network, how they can login using MFA however not reachable to VIP - Enterprise GW?

[Andreas Horlacher]

Are you referring to the VIP integration for Microsft Credential Provider? There is an offline access option outlined in the guide for users without internet access. It involves the use of a USB security key.  Have a look at the guide to see all of the options.

------------------------------
[~Andreas
------------------------------

[Ahmed.Mamdouh]

Hi Andreas,

As i can see from authentication flow [Check attached file], is it required to be connected to the Corporate network? or we can use Security key to login to Windows for remote users whom not reachable to VIP- Enterprise Gateway? because, if i have to be connected to NW and reached the EG why we need to purchase the Security Key? 

am waiting your favorable response!

[Andreas Horlacher]

Hi Ahmed,

That flow is for online authentication. 

Network connectivity is required for the initial registration and activation of the token. Once complete, the end-user can log in to their laptop (or other protected resource) using the VIP token, even if the machine is offline. (please refer to the updated guide linked in my last response).

------------------------------
~Andreas
------------------------------

[Ahmed.Mamdouh]

Hi Andreas,

Thanks for the prompt response, but to get complete understanding as i'm not finding the right information from the guide provided.

did you mean by offline authentication, the machine\ laptop not connected to corporate network (Not reachable to VIP-EG) and the internet not reachable? also, with this scenario with the Security Key we can login to the protected resource?

Thanks in advance, waiting your valuable confirmation on my understanding.

[Ahmed.Mamdouh]

Dear Andreas,

Any update on the below?

Hi Andreas,

Thanks for the prompt response, but to get complete understanding as i'm not finding the right information from the guide provided.

did you mean by offline authentication, the machine\ laptop not connected to corporate network (Not reachable to VIP-EG) and the internet not reachable? also, with this scenario with the Security Key we can login to the protected resource?

Thanks in advance, waiting your valuable confirmation on my understanding.

[Andreas Horlacher]

Hi Ahmed - Yes, that is correct. The offline MCP option allows users to access their laptop when there is no internet/corp network connectivity, such as while traveling. 

 

------------------------------
~Andreas
------------------------------