Is it possible to configure multi-factor authentication to access Plesk?

Follow

Comments

3 comments

  • Avatar
    Dennis Am

    Could you please update this article, mentioning that multi-factor authentication only applies to the web interface, and not to the REST API + Plesk Mobile App? Thanks in advance :)

    0
    Comment actions Permalink
  • Avatar
    Denis Bykov

    @Dennis Am

    Thank you for noticing! The article was updated.

    1
    Comment actions Permalink
  • Avatar
    Ehud Ziegelman

    MFA is not supported on mobile, ability to add this we consider as a feature request. But since MFA is not supported we do confirm as a bug the fact that MFA screen shown at all, it should be disabled. Request ID to hide it is PMBL-562. 

    Mobile application uses XML-RPC API requests to communicate with Plesk server. If you want to enhance security you may either disable API at all or limit it to specific IP addresses. To do so, add the following entries to the panel.ini file.

    • To prohibit all connections via XML API:

      [api]
      enabled = off

    • To allow connections via XML API only from specific IP addresses:

      [api]

      allowedIPs = 203.0.113.2,192.0.2.2

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request