Skip to main content

Overview

Welcome to SecTrail MFA documentation! This guide contains all the information you need to install, configure, and manage your multi-factor authentication system.

What is SecTrail MFA?

SecTrail MFA is an enterprise multi-factor authentication solution. It is a high-performance and scalable platform designed to secure access to organizations' critical systems.

Core Concept

Traditional password-based security is no longer sufficient. SecTrail MFA maximizes security by using two or more independent factors to verify user identity:

  1. Something you know - Password, PIN
  2. Something you have - Phone, token device
  3. Something you are - Biometric data (in future releases)

Why SecTrail MFA?

🔐 Enterprise Security

  • 81% of data breaches involve weak or stolen passwords
  • MFA reduces account takeover risk by 99.9%
  • Effective protection against phishing attacks

🚀 Easy Integration

SecTrail MFA easily integrates with your existing infrastructure:

  • RADIUS support - VPN, Firewall, and network devices
  • SAML 2.0 - SSO for web applications
  • REST API - For your custom applications

⚡ Quick Installation

  • Installation time: 1-2 hours
  • Initial configuration: 30 minutes
  • User training: 15 minutes

🌍 Wide Vendor Support

Compatible with major VPN and security products:

  • Palo Alto
  • Fortinet
  • Cisco
  • Checkpoint
  • F5
  • Citrix
  • CyberArk
  • Ivanti and many more...

Documentation Content

📚 Fundamentals

  • What is multi-factor authentication and why is it important?
  • SecTrail MFA's key features and architecture
  • Supported authentication methods

🔧 Installation and Configuration

  • System installation and initial configuration
  • Creating authentication profiles
  • Application profiles and factor chains
  • Policy engine and access controls

🔌 Integrations

  • VPN and Firewall: Palo Alto, Fortinet, Cisco, Checkpoint
  • SAML SSO: Single Sign-On for web applications
  • ADFS: Microsoft federation services
  • Operating Systems: Windows Login/RDP, Mac Login, Linux SSH/Sudo
  • Directory Server: Active Directory, OpenLDAP
  • REST API: Integration for custom applications

📱 Authentication Methods

  • LDAP Authentication
  • Local Authentication
  • LDAP+OTP
  • Soft OTP (Mobile app - SecTrail Authenticator)
  • SMS OTP
  • Mail OTP
  • Push Notification Authentication (Mobile app - SecTrail Authenticator)
  • Approved OTP
  • Mail Link Authentication
  • QR Login (Passwordless)
  • WebAuthn (FIDO2 hardware keys)

🛠️ Management and Monitoring

  • System status and performance monitoring
  • Log management and reporting
  • Backup and restore
  • License management
  • User and group management

Quick Start

Recommended steps for new users:

Support and Resources

📞 Technical Support

24/7 Professional Support:

🎓 Training Services

SecTrail offers comprehensive training programs for installation and usage:

  • Installation and basic configuration training
  • Advanced features and integration training
  • Custom training programs for organizations

Contact our support team for detailed information.

Release Notes

Current Version

This documentation is prepared for SecTrail MFA v2.0.

v2.0 New Features:

  • 🆕 QR Login: Passwordless authentication support
  • 🆕 WebAuthn: FIDO2 compliant hardware keys (Windows Hello, Touch ID, etc.)
  • 🆕 Mail Auth: Email link-based authentication
  • 🆕 Manager Approval: Manager-approved access control
  • 🆕 LDAP+OTP: Two-factor authentication in a single step
  • 🔐 SAML 2.0 SSO: Enhanced Single Sign-On support
  • 💻 Mac Login: macOS operating system integration
  • 🐧 Linux SSH/Console/Sudo: Comprehensive Linux integration support
  • 🪟 Windows Login/RDP: Extended authentication methods
  • 🔗 Multiple Factors: Unlimited factor chain creation
  • 📱 Mobile App: Improved user interface
  • Performance: System optimizations and speed improvements

Next Step

To learn why multi-factor authentication is important:

➡️ Why Should I Use MFA?


Happy reading! 🚀