Configure Amazon Workspaces MFA

Amazon Workspaces must be configured for MFA. During this task we will update Amazon WS directory configuration to enable MFA.

Before you begin

  • Ensure that you have the common UDP Port and Secret key values available

Configure AWS MFA

DUO MFA with Push/SMS/Call is not supported for Amazon Workspaces with RADIUS. When an end user, enrolled in Okta with DUO MFA, attempts to access Amazon Workspaces configured with RADIUS, they must provide the six digit MFA passcode displayed on the DUO mobile app in addition to their primary password.

  1. Return to the browser open to the Amazon Workspace.

  2. Open the directory configuration.

  3. Select enable Multi-Factor authentication.

  4. Specify the following values:

    Field Value
    RADIUS Server IP Instance B's private IP address
    Port 1899
    Shared Secret Value used when installing the Okta RADIUS agent.
    Protocol PAP
  5. Save the updated configuration. When complete the updates should resemble: