Skip to content

MFA rollout and maintenance

Every member of staff signs in with a second factor (multi-factor authentication, MFA) using a TOTP app, a FIDO2 security key or a passkey. Zitadel enforces this centrally.

01

Your Benefits

4 points
B.01

Accounts can no longer be taken over through phishing, even if a password has been compromised

B.02

The identity provider (IdP) enforces MFA centrally, so individual applications do not need to support it themselves

B.03

If someone forgets their device, the Netsource service desk resets the second factor

B.04

Helps you meet the requirements of cyber insurers and data protection law (GDPR)

02

Service scope

6 Building blocks
L.01

Initial set-up for all staff, with training material

L.02

We configure the MFA methods in Zitadel (TOTP, FIDO2, passkey)

L.03

Stricter rules for sensitive applications (conditional access), e.g. always FIDO2 for admin sign-in

L.04

If a device is lost, we reset access via a service desk ticket

L.05

We can procure and set up hardware keys if you wish

L.06

Each quarter we check that all accounts are using MFA

03

Requirements and exclusions

What is needed and what is not included

→ Prerequisites

  • Zitadel is set up as the IdP (NDS-ID-ZITADEL)
  • A maintenance contract, if you need a guaranteed response time

✗ Not included

  • We do not offer MFA by SMS, as it is not secure enough
  • Hardware keys are supplied at list price and are not included in the fee
  • For Microsoft 365, MFA is enforced by Microsoft's Conditional Access, in combination with the Zitadel federation
  • Phishing awareness training is provided separately as NDS-PRJ-SCHUL
[ NDS-ID-MFA ] [ netsource.de ]
Next step

Does this fit your business?

In 30 minutes we work out whether this service suits you. Free and without obligation.