Accounts can no longer be taken over through phishing, even if a password has been compromised
MFA rollout and maintenance
Every member of staff signs in with a second factor (multi-factor authentication, MFA) using a TOTP app, a FIDO2 security key or a passkey. Zitadel enforces this centrally.
Your Benefits
The identity provider (IdP) enforces MFA centrally, so individual applications do not need to support it themselves
If someone forgets their device, the Netsource service desk resets the second factor
Helps you meet the requirements of cyber insurers and data protection law (GDPR)
Service scope
Initial set-up for all staff, with training material
We configure the MFA methods in Zitadel (TOTP, FIDO2, passkey)
Stricter rules for sensitive applications (conditional access), e.g. always FIDO2 for admin sign-in
If a device is lost, we reset access via a service desk ticket
We can procure and set up hardware keys if you wish
Each quarter we check that all accounts are using MFA
Requirements and exclusions
→ Prerequisites
- Zitadel is set up as the IdP (NDS-ID-ZITADEL)
- A maintenance contract, if you need a guaranteed response time
✗ Not included
- We do not offer MFA by SMS, as it is not secure enough
- Hardware keys are supplied at list price and are not included in the fee
- For Microsoft 365, MFA is enforced by Microsoft's Conditional Access, in combination with the Zitadel federation
- Phishing awareness training is provided separately as NDS-PRJ-SCHUL
Related Services
Zitadel identity provider
One account for all your applications. We run Zitadel as an identity provider ourselves, based on the OIDC standard and with MFA mandatory from the start.
User lifecycle management
A fixed procedure for creating, changing and deactivating your staff's user accounts. Every step is documented, automated and traceable.
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.