ForgeRock® Enterprise Connect MFA for Workforce

Description

The aim of this course is to showcase the key features and capabilities of the ForgeRock® Enterprise Connect (Enterprise Connect) solution in a ForgeRock® Identity Cloud environment. It provides the student with the knowledge and confidence to manage their own environment. It is accepted that this course is not able to demonstrate all the features and capabilities of Enterprise Connect. Further information and guidance can be found in the documentation and knowledge base articles in the online repositories at Backstage.

 

Target Audiences

The target audiences for this course include:

• Enterprise Connect Administrators
• Technical users who work with Enterprise Connect
  • Evaluators
  • Integrators
  • Consultants
  • Architects
  • Administrators

 

Objectives

Upon completion of this course, you should be able to:

• Define what Enterprise Connect is and present the main characteristics
• Install and configure Windows Workstation Authentication to secure a Windows workstation with multi-factor authentication (MFA) using the ForgeRock Authenticator app
• Install and configure the remote authentication dial-up service (RADIUS) Proxy on a Windows machine, and then configure a VPN server and Linux secure shell (SSH) to use RADIUS proxy for MFA using the ForgeRock Authenticator app
• Install and configure Mac Workstation Authentication to enable MFA for Mac user

 

Prerequisites

The following are the prerequisites for successfully completing this course:

• Awareness of MFA
• Identity and access management knowledge
• Linux system administration skills
• Windows and Active Directory (AD) system administration skills
• MacOS Administration skills

 

Duration

Approximately 3 hours

 

Course Contents

Welcome to ForgeRock^® Enterprise Connect MFA for Workforce

• Course Introduction

 

Introducing Enterprise Connect

Define what Enterprise Connect is and present the main characteristics:

• Describe Enterprise Connect
• User onboarding experience and Enterprise Connect MFA

 

Deploying Windows Workstation Authentication

Install and configure Windows Workstation Authentication to secure a Windows workstation with MFA using the ForgeRock Authenticator app:

• Create authentication journeys
• Review authentication journeys
• Synchronize user accounts
• Reconcile user accounts and review configuration settings.
• Download Windows Workstation Authentication
• Locate Windows Workstation Authentication documentation and download binaries
• Create a Windows Workstation Authentication MSI file
• Install and configure the MSI Updater
• Deploy a Windows Workstation Authentication MSI file
• Deploy a Windows Workstation Authentication MSI file
• Perform an MSI upgrade
• Upgrade an MSI file to enable offline MFA
• Configure offline Windows Workstation Authentication
• Perform offline MFA
• Control workstation authentication availablity
• Disable and enable workstation authentication CP
• Troubleshoot Windows Workstation Authentication
• Troubleshoot Windows Workstation Authentication

 

Deploying RADIUS Proxy

Install and configure the RADIUS Proxy on a Windows machine, and then configure a VPN server and Linux SSH to use RADIUS proxy for MFA using the ForgeRock Authenticator app:

• Download RADIUS Proxy
• Locate and download RADIUS Proxy binaries
• Install RADIUS Proxy
• Install RADIUS Proxy
• Authenticate VPN clients with RADIUS Proxy
• Authenticate a VPN client with MFA
• Configure Linux SSH and the sudo command to use MFA
• Explore Linux configuration files that enable MFA
• Troubleshoot RADIUS Proxy
• Troubleshoot RADIUS Proxy

 

Configuring Mac Workstation Authentication

Install and configure Mac Workstation Authentication to enable MFA for Mac users:

• Install Mac Workstation Authentication
• Install Mac Workstation Authentication
• Onboard local users
• Onboard a user to authenticate with MFA
• Offline OTP
• Configure offline OTP
• Update System Preferences
• Update system preferences
• Troubleshoot Mac Workstation Authentication
• Troubleshoot Mac Workstation Authentication