How to setup MFA for VPN

This guide will show you the steps needed in order to set up and utilize MFA for your VPN connection.

NOTE: Ensure that you have the Microsoft Authenticator mobile app installed on your phone. The app is available for download on the Google Play Store (Android) or the App Store (Apple iOS).

If at any point you need assistance with setting up MFA for usage with the VPN, please contact the IT department.

We can be reached via email (help@stanweaver.com), or in cases of emergencies and after-hours support, dial (727) 272-7561.

Table of Contents:

 

MFA Setup

Begin by opening a web browser. In the address bar, type in the appropriate URL for your respective office:

These websites will lead you to the Sophos User Portal. This portal will vary in appearance, but will always contain fields for you to submit your username and password.

At this page, you will need to enter in the same login information that you use when logging in to your computer. Then select "Login":

After logging in, you will enter a new page, just like the one shown below:

On your phone, please open the Microsoft Authenticator app. On the Home screen, please select the "+" symbol on on the top-right hand corner of your phone's screen:

Next, on the "Add account" screen, please select "Other account (Google, Facebook, etc.)" to continue:

The back camera on your phone should then activate, allowing you to scan the QR code found on the User Portal:

Afterwards, you should now see a new account added to the Home screen in the Microsoft Authenticator app:

When you select the account, you will see that there is a Timed One-time Password code (OTP) available to use. This code will present a new set of numbers every 30 seconds. You will use this code when signing in to the VPN:

 

How to connect to Sophos Connect VPN Client

To begin, before you connect to the VPN, please ensure that you click the Cog icon and select "Clear credentials". This is only done if you have saved your credentials when logging in to the VPN.

 

Next, select "Connect". On the "Authenticate user" prompt, please DO NOT select the checkbox for "Save user name and password".

You will be prompted to enter your login credentials.When signing in to the VPN Client, your login credentials will be the same that have been used when signing in to your computer, except you will also add the Timed One-time Password code (OTP) to the end of your password:

 

 

How to connect to the OpenVPN Client

To begin, before you connect to the VPN, please ensure that you uncheck the box for "Save password". This is only done if you have saved your credentials when logging in to the VPN.

 

 

Next, clear out the password field until it is blank. You are now ready to enter in your password.

When signing in to the VPN Client, your login credentials will be the same that have been used when signing in to your computer, except you will also add the Timed One-time Password code (OTP) to the end of your password: