Use MFA for Windows logins

If your organization protects Windows logins with Akamai MFA​, you authenticate with Akamai MFA​ after you enter your Windows credentials. This applies when you log in to your Windows device directly and when you connect to it with Remote Desktop.

Before you begin

Self-enroll in MFA and activate your trusted mobile device for authentication purposes.

📘

The enrollment of security keys, including the WebAuthn/FIDO2 and phone security key, is not supported for Windows logins.

Log in to your Windows device

Follow these steps to log in to your Windows device with Akamai MFA​.

How to

  1. On your Windows login screen, enter your credentials and press Enter.

  2. On the authentication dialog, select a device and an authentication method. For example, to select the Akamai MFA​ push notification, click Send me a Push. You receive an authentication request in the Akamai MFA​ mobile app.

  3. Click the incoming alert to display the notification on your mobile device.

  4. In Login request, tap Allow to confirm your identity. You are logged in to your Windows device.

Log in with Remote Desktop

Follow these steps to connect to a Windows device with Remote Desktop and authenticate with Akamai MFA​.

Before you begin

Enable remote desktop connectivity on the device you're logging in to.

How to

  1. Launch the remote desktop session by selecting Remote Desktop Connection from the Start menu.

  2. In the Remote Desktop Connection dialog, go to Computer and enter the name or IP address of the Windows device. Click Connect.

  3. In the Enter your credentials dialog, enter your username and password. After a successful primary authentication, you’re redirected to Akamai MFA​.

  4. On the authentication dialog, select a device and an authentication method. For example, to select the Akamai MFA​ push notification, click Send me a Push. You receive an authentication request in your account in the Akamai MFA​ mobile app.

  5. Click the incoming alert to display the notification on your mobile device.

  6. In Login request, tap Allow to confirm your identity. Akamai MFA​ displays a confirmation message and connects you to the remote Windows device.

Offline login

With offline login, you can complete multi-factor authentication and log in to your Windows device even when it has no internet connection. You set up offline login while online by scanning a QR code with Akamai MFA or with another authenticator app. When your Windows device is offline, you enter a one-time passcode from that app instead of authenticating with Akamai MFA​ online.

Enable offline login

Follow these steps to enable offline login on your Windows device. Offline login is available only if your administrator has enabled this feature.

How to

  1. On your Windows login screen, enter your credentials and press Enter.

  2. On the authentication dialog, select Enable offline login. When selected, an informational banner displays: Offline login activation will begin after authentication.

  3. Select a device and complete authentication. The Offline Login Activation dialog now shows a QR code.

  4. Scan the QR code with Akamai MFA or with another authenticator app.

  5. After scanning the QR code, your authenticator app displays a one-time passcode. Enter that passcode into the 6-digit code input field on your Windows device.

  6. Click Activate Offline Login. You are logged in to your Windows session. Next time you log in, you will be able to authenticate offline.

📘

Until you enable offline login, the Activate Offline Login dialog may also appear after you authenticate. Click Activate Now and continue from step 4. If you click Remind me Later or Don't Show Again, you can still enable offline login at any time with the steps above.

Disable offline login

Follow these steps to disable offline login on your Windows device.

How to

  1. On your Windows login screen, enter your credentials and press Enter.

  2. On the authentication dialog, select Disable offline login. When selected, a warning banner displays: Your existing offline login authenticator will be removed after authentication.

  3. Select a device and complete authentication. Your offline authenticator is removed and you are logged in to your Windows session.

To enable offline login again, follow the steps in Enable offline login.

Authenticate with offline login

Follow these steps to log in to your Windows device when you are offline.

How to

  1. On your Windows login screen, enter your credentials and press Enter. If your Windows device has no internet connection, the Offline Login dialog opens.
  2. Open your authenticator app to get a one-time passcode.
  3. In the Offline Login dialog, enter the passcode.
  4. Click Login. You are logged in to your Windows session.

A small time difference between your Windows device and your authenticator app won't cause your code to fail.

After you exceed the number of offline logins or days offline set by your administrator, you may be prompted to authenticate online.

Remember your Windows device

If your administrator has enabled this feature, you can skip authentication with Akamai MFA​ on a trusted Windows device for a duration set by your organization. Remote Desktop logins aren't remembered.

How to

  1. On your Windows login screen, enter your credentials and press Enter.

  2. On the authentication dialog, select Remember me for <duration>.

  3. Select a device and complete authentication.

During this period, you don't need to authenticate with Akamai MFA when you log in to the Windows device or when you unlock it.


Did this page help you?