If you plan to use DualShield as the MFA provider for the computer logon modern authentication solution, then it is assumed that you will also use DualShield as the management service provider.
You can use DualShield as the MFA provider for computer logon in 2 ways. You can use DualShield as the direct MFA provider, or as the indirect MFA provider via Entra EAM (External Authentication Method).
DualShield as the Direct MFA Provider
If you use DualShield as the direct MFA provider, then you need to do the following:
Step 1: Set up a service provider in DualShield for Computer Logon MA
Click "Create" to create a new service provider
Fill in the form as below:
| Type | Select "OpenID Connect" |
| Vendor | Select "Computer Logon MA" |
| SSO Server | Select your DualShield SSO Server |
| Application | Select the application that you have created for Computer Logon MA |
| Name | Enter a name, e.g. Computer Logon MA |
Click the SAVE button
Step 2: Set DualShield as the Authentication Provider
In the DualShield Admin Console, navigate to Configuration \ Computer Logon Modern Authentication
Select "Settings" in the sidebar
In the "Authentication Provider" box, select "DualShield"
In the "CLO-MA Service Provider" box, select the newly created service provider for computer logon, e.g. Computer Logon MA
Click the "FINISH" button to save the settings.
DualShield as the Indirect MFA Provider via Entra EAM
If you use DualShield as the indirect MFA provider via Entra EAM, then you need to do the following:
Step 1: Set up External Authentication Method for Microsoft Entra ID
Step 2: Set Entra EAM as the Authentication Provider
In the DualShield Admin Console, navigate to Configuration \ Computer Logon Modern Authentication
Select "Settings" in the sidebar
Fill in the form as below:
- In the "Authentication Provider" box, select "Entra-EAM"
- In the "EAM Service Provider" box, select the service provider that you have already created during the process of setting up EAM, e.g. "EnraID EAM" (Reference: Create a service provider in DualShield for EAM integration)
- In the "Entra Tenant Type" box, select the type of your Entra tenant, e.g. Single or Multiple
- In the "Entra Tenant ID" box, enter the ID of your Entra tenant.
Click the "FINISH" button to save the settings.
Step 3: Update the EAM service provider
Edit the service provider that you have created for EAM integration and that you have selected in the above step in 2), e.g. "EntraID EAM"
In the "CLO MA Entra Application ID" box, enter the ID of the enterprise application that you have created for Computer Logon MA (Reference: Set up an enterprise application in Entra ID for Computer Logon MA)
Click the SAVE button