MFA for Desktop Shortcut

The TruGrid Desktop Shortcut feature allows end users to create desktop shortcuts of their favorite remote desktops and applications, and connect to these resources without additional authentication and without opening the TruGrid Connector application each time. To make this process more secure Admin can enable MFA for Desktop Shortcuts

It means that if admin turns on MFA for shortcut for user, when user runs shortcut, it will require to enter One Time Code (MFA) either from authenticator app, email or SMS, depends on method user used to set up MFA.

TruGrid does not support push notifications for MFA when using shortcuts in order to improve security.

This feature is supported only for on-premises domains.
Azure and Hybrid will not have Required MFA Code for Shortcut slider and MFA Code Required column on a Desktop shortcut page.

By default, MFA for shortcuts is turned OFF.

There are 2 options to manage MFA for shortcut:

Admin may enable “Require MFA Code for Shortcut” – this will enable MFA for all users who has Desktop Shortcut ON after enabling this feature in the appeared popup.

Admin can manage MFA shortcut from Company -> Security Management -> Desktop Management -> Desktop Shortcut for own domain.
Or
Select Active Customer domain on Customer Domain page and mange MFA shortcut from Customer -> Security Management -> Desktop Management -> Desktop Shortcut for available customer domains.


After you turn the switch to ON you will be prompted for confirmation



After “Require MFA Code for Shortcut” is ON:


for users who has Shortcut ON, MFA Code Required will be automatically turned ON.
for users who has Shortcut OFF, MFA code required will be OFF. But once admin turns on shortcut for a that user, Shortcut MFA code required will turn on.
Once “MFA Code Required” changes the status to ON, Trugrid will automatically turn on MFA for login if it is OFF for the user.
“Require MFA Code for Shortcut” is OFF. Admin can enable “MFA Code Required” for specific user. This action is enabled only if user has “Desktop Shortcut” ON. If admin Turn ON “MFA Code Required” it will:
Turne ON without any messages if MFA for login is ON.
Confirmational popup to inform admin that if admin turns on MFA Code Required it will automatically turn on MFA for login.

If MFA for login was OFF and never setup before first step with the next user’s login on Web, WIN/MAC Connectors would be to set up MFA via next login.
If MFA for login was OFF and never setup before and user runs shortcut after MFA for shortcut was ON, shortcut will refer user to setup MFA using desktop app


If MFA for shortcut is ON and later admin turn it OFF it will not affect MFA for login. It will be ON until admin will not turn it off from the portal.
If MFA for shortcut is ON and admin turns OFF MFA for login it will automatically turn off MFA for shortcut.

**Filters for Shortcuts and MFA**

On the Desktop Shortcut page admin can filter users by needed criteria. By default, filter is set to “All Desktop Shortcuts”.





If admin selects “Desktop Shortcuts Enabled” menu provide an option to select if you would like to see users with “MFA Code Required ON” (default value) or users with “MFA Required OFF”. And apply selected filters.


If Admin selects from filter “Desktop Shortcut Enabled” + “MFA Code Required ON”, applies filter and select at least 1 checkbox filter will be replaces with two action buttons:
Unselect All
Manage Desktop Shortcut with 2 options:
Disable Desktop Shortcut – will disable shortcut for selected users.
Disable MFA Code – will disable MFA for Shortcut for selected users.


If Admin selects from filter “Desktop Shortcut Enabled” + “MFA Code Required OFF”, applies filter and select at least 1 checkbox filter will be replaces with two action buttons:

Unselect All
Manage Desktop Shortcut with 2 options:
- Disable Desktop Shortcut – will disable shortcut for selected users.
- Require MFA Code – will enable MFA for Shortcut for selected users.


If admin selects “Desktop Shortcuts Disabled” – no other options available. Just an option to apply the filter.


If Admin selects from filter “Desktop Shortcuts Disabled” and applies filter and select at least 1 checkbox filter will be replaces with two action buttons:

Unselect All
Manage Desktop Shortcut with 2 options:
- Enable Desktop Shortcut – will enable shortcut for selected users.
- Require MFA Code – will enable MFA for Shortcut for selected users.

Updated on: 15/11/2024