Multi-Factor Authentication (2FA/MFA) for Awingu

Last updated on July 1, 2026

Overview of MFA for Awingu

Rublon MFA integrates with Awingu by using Rublon Authentication Proxy deployed as an on-premises server. Awingu uses the RADIUS protocol for multi-factor authentication (MFA), pointing to the Rublon Authentication Proxy server.

Users may choose between Passcode, Mobile Push, and Email Link for Two-Factor Authentication during their login to Awingu.

Enable Entra ID logins to Awingu using Rublon MFA

If Awingu authenticates users through LDAP or RADIUS, you can use Rublon Authentication Proxy to validate primary credentials against Microsoft Entra ID and then enforce Rublon MFA. This allows users to sign in to Awingu with Microsoft Entra ID credentials, even when Awingu does not support Microsoft Entra ID, SAML, OAuth 2.0, or OpenID Connect natively.

See how to authenticate LDAP and RADIUS with Microsoft Entra ID credentials and MFA, or explore the related use case: Microsoft Entra ID logins for LDAP and RADIUS applications with MFA.

Supported Authentication Methods

Authentication Method	Supported	Comments
Mobile Push	✔	N/A
FIDO	–	N/A
Passcode	✔	N/A
SMS Passcode	–	N/A
SMS Link	✔	N/A
Phone Call	✔	N/A
QR Code	–	N/A
Email Link	✔	N/A
YubiKey OTP	✔	N/A
RFID	–	N/A

Before your start

You need to install and configure Rublon Authentication Proxy before configuring Awingu to work with it. If you have not installed a Rublon Authentication Proxy yet, please go to its documentation and follow the described installation and configuration steps. Afterward, come back to the Configuration section in this document.

Ensure that you have properly set up your authentication source, that is an external Identity Provider (IdP) like FreeIPA, OpenLDAP, or Microsoft Active Directory.

Configuration of MFA for Awingu

Rublon Authentication Proxy

The following configuration shows all fields required by the Awingu configuration. Copy-paste the data to config.yaml and change the environment-specific values. The LDAP section should mirror the domain details configuration on the Awingu side.

For more information about Rublon Authentication Proxy configuration, see the documentation.

log:
  debug: false

rublon:
  api_server: https://core.rublon.net
  system_token: system_token_obtained_from_rublon_admin_console
  secret_key: secret_key_obtained_from_rublon_admin_console

proxy_servers:
  - name: RADIUS-Proxy
    type: RADIUS
    ip: 172.16.1.100
    port: 1812
    radius_secret: secret_to_communicate_with_the_proxy
    mode: nocred
    auth_method: email

With this configuration, Rublon Authentication Proxy will be listening on 172.16.1.100:1812 (1812 is the default RADIUS port) for any incoming requests from Awingu. If a request is received, it will try to find the user’s email address in Active Directory (using the username sent within the request) and verify the token against Rublon. If the username, token or email address is invalid, the authentication request will be rejected. Please note that by default Awingu uses the sAMAccountName property as a username, and so does Rublon.

Awingu

The configuration on the Awingu side should mirror the Rublon Authentication Proxy configuration. It is assumed you have already set up your domain.

1. Go to Configure → User Connector.

2. Fill in the Multi-factor Authentication section. Refer to the following image and table to learn how to fill in the form.

Mode	Set to RADIUS
Servers	The IP address of your Rublon Authentication Proxy server
Port	The port of your Rublon Authentication Proxy server
Secret	The RADIUS SECRET you set in Rublon Authentication Proxy
LDAP username attribute	Use the same USERNAME_ATTRIBUTE you set in Rublon Authentication Proxy. By default, it is set to “sAMAccountName”

3. Click the Apply button to save the changes.

4. Your configuration is now complete. You can use Rublon 2FA when logging in to Awingu.

Example of using Rublon MFA for Awingu

The example below shows how Rublon MFA authenticates a particular user when they try to log in to Awingu.

1. First, they are asked to provide their username and password.

2. If the credentials that were entered in the first step were correct, then they are asked to provide an authentication method of their choosing.

Valid options are:

• 123456 – a Passcode (6-digit TOTP code generated by Rublon Authenticator or another third-party authentication app like Google Authenticator or Microsoft Authenticator)
• 123456789 – a Bypass Code (9-digit code received from the administrator)
• push – a Mobile Push is sent to their phone; requires Rublon Authenticator
• email – an email message containing an Email Link is sent to their email address
• smsLink – a text message containing an SMS Link
• phoneCall – a Phone Call from Rublon
• <YubiKey OTP code> – insert the YubiKey and press the button on the key; the OTP will be typed automatically and then Enter will be pressed

Let’s assume they chose Passcode.

3. This Passcode is provided by Rublon Authenticator.

4. After entering a valid Passcode, they are logged in successfully.

Troubleshooting

If you encounter any issues with your Rublon MFA integration, contact Rublon Support.

Related Posts

Rublon Authentication Proxy

Rublon Authentication Proxy – Integrations