One Identity Safeguard for Privileged Sessions 6.0 LTS - Starling Two-Factor Authentication- Tutorial

Perform multi-factor authentication with the SPS Starling plugin in terminal connections

The following describes how to establish a terminal connection (SSH, TELNET, or TN3270) to a server.

To establish a terminal connection (SSH, TELNET, or TN3270) to a server

1. Connect to the server.

   • If you can authenticate using an OTP or token, encode the OTP as part of the username. You can use the @ as a field separator. For example:

     ssh otp=YOUR-ONE-TIME-PASSWORD@user@server

     Replace YOUR-ONE-TIME-PASSWORD with your actual OTP. If needed, you can specify the type of OTP as a prefix to the OTP. For example, to specify the OTP of a YubiKey token:

     ssh otp=y_YOUR-ONE-TIME-PASSWORD@user@server

     • Google Authenticator: g

     • inWebo Authenticator: o

     • Symantec token: s

     • YubiKey: y

     • RSA token: r

   • If you need to authenticate using the Starling Verify push notification, approve the connection in your mobile app.

2. If SPS prompts you for further information, enter the requested information. If you need to authenticate with an OTP, but you have not supplied the OTP in your username, you will be prompted to enter the OTP.

3. Authenticate on the server.

4. If authentication is successful, you can access the server.