Verification during RDP sign-in
A domain account, a number on the sign-in screen and automatic access to the desktop after approval. We are testing the pilot in a Windows RDS environment.
Security by MyOffice
MyMFA adds another verification step to your work sign-in. Approve access on your paired device and get on with your work.
PILOT Windows RDP · product in development
01 / How it works
Your password is the first step. MyMFA verifies that it is really you approving access.
Use your work account. A MyMFA number appears on your computer during verification.
Confirm the matching number on your paired device. Reject any sign-in you did not initiate.
Once approved, your remote desktop opens automatically. No additional confirmation in the sign-in dialog.
The mobile apps support push notifications through Apple APNs and Google FCM. Delivery depends on permissions, connectivity and phone settings.
02 / Product
MyMFA is being developed for domain-based business environments and hosted service providers. We are starting with remote desktop sign-in and gradually expanding its uses.
A MyOffice projectA domain account, a number on the sign-in screen and automatic access to the desktop after approval. We are testing the pilot in a Windows RDS environment.
The iOS and Android apps let you approve or reject a sign-in request. Current releases are listed below.
Support for RD Web and the customer portal, trusted browser recognition and alternative verification when offline.
MyMFA · iOS / Android
MyMFA for iPhone and Android is available on the App Store and Google Play. Public and upcoming releases are distinguished below.
iOS
Next release: 1.2.1 (build 48)
Awaiting store review
Android
Next release: 1.2.1 (build 48)
Awaiting store review
How MyMFA evolves — from the first pilots to public releases.
Full changelog →Deployed in a limited pilot
Phone approval for Panel sign-in works in the pilot. MyMFA and Require MyMFA controls are now deployed in the pilot peer-account editor. The scope is limited to one test account; user verification of changing the controls is still pending. This is not a generally available feature.
Optional MyMFA offers QR pairing or a wait for approval after sign-in, with an option to continue without MyMFA. Required MyMFA requires approval with no skip option; the server enforces this rule. Enabling enforcement requires a verified paired device, and a policy change requires fresh phone approval.
MyMFA Deployment Preview
Development version 0.2.0 · x64
A development package for MSI/GPO installation, diagnostics and server enrollment. Enrollment awaits approval. Includes ADMX/ADML policy templates.
This version does not protect sign-in. MFA activation and enforcement are not yet implemented. The package is not Authenticode-signed and is intended only for an isolated test environment.
SHA-256 checksum: 03a5da1c0803c8984318d49f5ccf114026370413eee7a984d9676d300f73da1f
Download GPO templates and instructions
SHA-256 checksum: fd2a378e7c3a2b7862a9b7180f9718b098b671f1259052312043dca64482c473
For GPO Software Installation, place the MSI on a UNC share accessible to the target computers. The web download URL does not replace this path. Store each new version at its own path and configure its upgrade relationship to the previous package in GPO. Retain older packages for repair and removal.
05 / Get in touch
Tell us about the environment you need to secure.
We will discuss the pilot options and future development.