Multi-Factor Authentication Service

Multi-Factor Authentication Service

Verify and authenticate users' identities before granting access to your server environment. Atlantic.Net's Managed Multi-Factor Authentication Service is the easiest way for users to confirm who they are before being granted access to your Linux (SSH) and Windows (RDP) servers, hosted applications, and cloud workloads.

The service deploys, integrates, and operates inside Atlantic.Net's SOC 2 Type II, HIPAA, HITECH, and PCI DSS-aligned hosting infrastructure, so the same MFA controls protecting your servers can be cited in your audit documentation.

What Is Multi-Factor Authentication (MFA)?

Multi-Factor Authentication requires two or more methods (also called factors) to verify your identity. Factors typically combine something you know ‐ like a username and password ‐ with something you have, such as a smartphone app that approves authentication requests, or something you are, such as a fingerprint or face scan.

You may also see MFA called Two-Factor Authentication (2FA) when only two factors are required. 2FA is a subset of MFA; the terms are used interchangeably in many products.

Why Do I Need Multi-Factor Authentication?

Multi-Factor Authentication is one of the most effective controls against remote attacks such as phishing, social engineering, credential stuffing, and brute-force password attempts. By integrating MFA with your Linux and Windows servers, attackers cannot access your accounts without also possessing the physical device needed to complete the second factor ‐ even if the password has been stolen.

Did You Know?

• An employee or contractor is responsible for 2 out of 3 insider threat incidents.
• Negligence-based insider threats cost on average $3.8 million per year.
• 52% of users re-use the same password across multiple logins.
• Microsoft has reported that MFA blocks more than 99.9% of automated account-compromise attacks.

How Does the Multi-Factor Authentication Service Work?

During login, a verification code or push approval is required in addition to the user's username and password. This adds a second layer of security to the account: even if a password is leaked or guessed, an attacker cannot complete the login without the second factor.

Atlantic.Net's Managed Multi-Factor Authentication

Atlantic.Net's Managed MFA delivers multi-factor authentication as a convenient single sign-on experience. Once cleared, the user gains access to enterprise files and applications ‐ both on-premises and in the cloud ‐ under a single policy framework.

Beyond verifying user identity, the service inspects the health of each device. By checking for the presence of essential security controls and out-of-date software, it can block high-risk or potentially compromised machines from connecting in the first place. Administrators retain control to enforce stricter access policies, such as requiring up-to-date software before login, lowering the attack surface against your confidential data.

How MFA Methods Compare

Different second factors balance convenience and security in different ways. The table below summarizes how the methods commonly available in Atlantic.Net's Managed MFA service stack up.

Method	What the User Needs	Strength vs. Phishing	Works Offline	Best For
Password only (single-factor)	Username + password	Weak ‐ vulnerable to phishing, leaks, brute force	Yes	Legacy systems (not recommended)
SMS passcode	Phone with cell signal	Moderate ‐ vulnerable to SIM-swap attacks	No	Consumer apps, low-risk accounts
Phone callback	Phone with cell signal	Moderate	No	Helpdesk, healthcare front desks
TOTP authenticator app	Smartphone with TOTP app	Strong	Yes	Enterprise standard for SSH/RDP/SSO
Push approval	Smartphone with MFA app	Strong ‐ resistant to credential phishing	No (needs data)	Daily enterprise sign-ins
One-time bypass code	Pre-issued code	Single-use only	Yes	Lost devices, contractor access, break-glass

Atlantic.Net's Managed MFA supports SMS, phone callback, TOTP, and bypass codes today; push approval and additional methods are available through specific integrations on request.