Multi-Factor Authentication (2FA/MFA) for VMware Horizon View (VDI)

Last updated on July 1, 2026

Overview of MFA for VMware Horizon View (VDI)

Multi-Factor Authentication (MFA) for VMware Horizon View (VDI) is a security measure that requires users to provide two authentication factors to gain access to Horizon View. The first factor is the user’s Active Directory/RADIUS username and password. After completing the first factor, the user must undergo secondary authentication with one of the supported authentication methods, such as Mobile Push or Email Link. Once both factors are verified, the user is then granted access to the resource. Enabling Two-Factor Authentication (2FA) or Multi-Factor Authentication (MFA) for VMware Horizon View (VDI) significantly reduces the chances of hackers being able to gain access to resources even if they know the user’s login credentials.

The purpose of this document is to enable Rublon Two-Factor Authentication (2FA) for users logging in to VMware Horizon View. In order to achieve that, you have to use Rublon Authentication Proxy, an on-premises RADIUS proxy server, which allows you to integrate Rublon with VMware Horizon View to add Two-Factor Authentication to your logins.

Enable Entra ID logins to VMware Horizon View (VDI) using Rublon MFA

If VMware Horizon View (VDI) authenticates users through LDAP or RADIUS, you can use Rublon Authentication Proxy to validate primary credentials against Microsoft Entra ID and then enforce Rublon MFA. This allows users to sign in to VMware Horizon View (VDI) with Microsoft Entra ID credentials, even when VMware Horizon View (VDI) does not support Microsoft Entra ID, SAML, OAuth 2.0, or OpenID Connect natively.

See how to authenticate LDAP and RADIUS with Microsoft Entra ID credentials and MFA, or explore the related use case: Microsoft Entra ID logins for LDAP and RADIUS applications with MFA.

Supported Authentication Methods

Authentication Method	Supported	Comments
Mobile Push	✔	N/A
FIDO	–	N/A
Passcode	✔	N/A
SMS Passcode	–	N/A
SMS Link	✔	N/A
Phone Call	✔	N/A
QR Code	–	N/A
Email Link	✔	N/A
YubiKey OTP	✔	N/A
RFID	–	N/A

Before you start

You need to install and configure Rublon Authentication Proxy before configuring VMware Horizon View (VDI) to work with it. Read Rublon Authentication Proxy and follow the steps in the Installation and Configuration sections. Afterward, follow the Configuration section in this document.

Ensure that you have properly set up your authentication source, that is, an external Identity Provider (IdP) like RADIUS, OpenLDAP, or Microsoft Active Directory.

Configuration of MFA for VMware Horizon View (VDI)

1. Log in to the VMware Horizon View Administrator web interface.

2. In the left pane, expand Settings and then click Servers.

3. Select the Connection Servers tab.

4. Select the connection server and click the Edit button.

5. Click the Authentication tab.

6. Navigate to the Advanced Authentication section and select RADIUS in the 2-factor authentication dropdown.

7. Check the following checkbox:

• Enforce 2-factor and Windows user name matching

8. In the Authenticator dropdown, select Create New Authenticator.

9. On the Client Customization page of the Add RADIUS Authenticator form, provide a name for your authenticator and click Next.

10. Fill in the Primary Authentication Server information. Refer to the following screenshot and table.

Hostname/Address	Enter the IP address of your Rublon Authentication Proxy.
Authentication Port	Set to 1812.
Accounting Port	N/A. Leave the default value.
Authentication Type	Select PAP.
Shared Secret	Enter the RADIUS_SECRET from Rublon Authentication Proxy.
Server Timeout	Controls how long the RADIUS server may take to respond to an authentication request. Set to 60.

10. Leave the default value for all other fields and click Next.

11. You can define a secondary authentication server. This is optional.

12. Click Finish to complete creating the RADIUS authenticator.

13. We recommend you review the Advanced Authentication section:

• Ensure that the authenticator you have just created is selected in the Authenticator dropdown
• Ensure that you have checked Enforce 2-factor and Windows user name matching

14. Congratulations. Your configuration is complete. You can log in to VMware Horizon View.

Testing MFA for VMware Horizon View (VDI)

This example portrays logging in to VMware Horizon View using the VMware Horizon Client. Mobile Push has been set as the second factor in Rublon Authentication Proxy configuration (AUTH_METHOD was set to push).

1. Open your VMware View Client.

2. Enter your Username and Passcode, and then click Login.

3. You will be sent an automatic push notification on your phone.

4. Tap APPROVE.

5. You will be logged in to VMware Horizon View.

Troubleshooting

If you encounter any issues with your Rublon MFA integration, contact Rublon Support.

Related Posts

Rublon Authentication Proxy

Rublon Authentication Proxy – Integrations