Integrations
Phone-approval 2FA for the systems you already run
Notakey connects through standard protocols such as RADIUS and SAML, or through its API, so your VPN, firewall, Windows logins and web applications keep working unchanged. Pick your system to see how it connects and what to configure.
MikroTik
MikroTik 2FA: phone approval for VPN and router logins
For teams running a MikroTik router as their VPN gateway or network edge. Every VPN connection and every admin login gets approved with a tap in Notakey Authenticator, and the router you already have is all it takes.
See how it connects →FortiGate
FortiGate 2FA: phone approval for VPN and administrator logins
For organisations with an internet-facing FortiGate whose VPN or administration console still accepts a password alone. With the Notakey auth-proxy in the RADIUS path, a leaked, sprayed or cracked password becomes a failed attempt instead of a login.
See how it connects →Palo Alto GlobalProtect
Palo Alto GlobalProtect 2FA over RADIUS with phone approval
For teams running GlobalProtect on a Palo Alto Networks firewall who want every VPN login approved on the user’s phone, without building a RADIUS server first. The Notakey appliance can be the whole back end: proxy, RADIUS and phone approval in one place.
See how it connects →Windows Remote Desktop
Windows Remote Desktop 2FA with the Notakey Windows Credential Provider
For IT teams whose servers and workstations are reached over Remote Desktop with nothing but a Windows password. The Notakey Windows Credential Provider adds a phone approval to the login screen, and can make it the only way in.
See how it connects →Linux SSH
Linux SSH 2FA with pam_radius and phone approval
For teams that administer Linux servers over SSH and want every shell, sudo and su to require a phone approval on top of the password. Linux PAM has a standard RADIUS module; point it at the Notakey auth-proxy and the whole fleet joins the same setup as your VPN.
See how it connects →WordPress
WordPress 2FA with phone approval: the Notakey provider plugin
For anyone running a WordPress site. WordPress logins are among the most brute-forced on the internet; two plugins and a Notakey application turn every login into a password plus a tap on the phone.
See how it connects →Any RADIUS VPN or firewall
VPN 2FA over RADIUS: phone approval for any VPN or firewall
For IT teams with any VPN concentrator or firewall that can point at a RADIUS server. The Notakey auth-proxy goes between the VPN and RADIUS, so every login needs the password and a tap on the phone. The RADIUS server and the users stay unchanged; on the VPN, only the RADIUS server address and timeout change.
See how it connects →Legacy web applications
Two-factor authentication for legacy web apps with a SAML proxy
For the internal web application that runs half the business, whose vendor is gone or whose source nobody dares to touch, and which the auditor now wants behind multi-factor authentication. A reverse proxy in front of it, backed by the Notakey SSO service, adds the phone approval without modifying a line of the app.
See how it connects →