Enabling two-factor authentication for terminal services

摘要

Techniques for enabling two-factor authentication for terminal services are described. A client receives an authentication token from an authentication server. The authentication token is used as a factor for authenticating the client to a terminal services device. Native authentication of the client is also performed.

主权项

1. A method executed at a client device for authenticating a request for a remote presentation comprising:
Receiving an authentication token using a first process running on the client device, the authentication token being received from an authentication server; writing data from the authentication token to a file on the client device using the first process, the file being accessible to a second process running on the client device, the second process being separate from the first process and being configured to enable a remote presentation between the client device and a terminal services device; passing authentication data from the file to a communications module using the second process, the communications module being configured to communicate data from the client device to the terminal services device and to the authentication server based on a protocol associated with the remote presentation; sending the authentication data in a format associated with the protocol to the terminal services device using the communications module; sending native authentication information to the terminal services device in the format associated with the protocol using the communications module; and receiving an indication that the terminal services device verified the authentication data with the server and that the terminal services device verified the native authentication information, the indication being received using the communications module.