Little surprised no one asked yet (can’t find it).
But can we have multifactor auth on the local HW controller too?
Use case 1:
I like to log in to the app and see what going on at a local site, but my mobile IP keeps changing so no whitelisting is possible, and exposing 443 to the whole world with the possibility of cracking my password within a few days is not a warm feeling
Use case 2 :
When a customer has multiple sites and has reasons to not go for the cloud controller option. It is easier to connect these sites without whitelisting all sometimes changing IPs
I actually am not sure the plans here. I believe it’s more a question of when rather than if, but I’ll confirm. You reminded me of some other questions about MFA too, one being Passkey/WebAuthn support.
Yes, MFA is planned for on-prem controllers. We have some other milestones coming up first though. And on a side note, the answer is yes, Passkey support is also planned (for both on-prem and cloud), but that would be a later date than adding TOTP support to local instances.