Multi-Factor Authentication Support in AlertSite

  June 23, 2023

In the dynamic realm of synthetic monitoring, where ensuring the performance and availability of critical aspects of web applications is a must, an important aspect has been missing – support for monitoring sign-in processes that use Multi-Factor Authentication (MFA).

Until now, no synthetic monitoring product on the market has adequately addressed the challenge of monitoring transactions that require the input of MFA code.

Recognizing this gap, SmartBear is announcing a new feature to AlertSite, our synthetic monitoring tool.

How It Works

Multi Factor Authentication (MFA) is a security measure that requires users to provide an additional form of identification before accessing an IT system. It combines traditional login and password with additional verification methods like e.g., security code or physical token, to prevent potential attackers from accessing the system by just stealing credentials.

With the introduction of MFA code support, AlertSite empowers its users to seamlessly monitor transactions involving SMS authentication codes.

This capability lets our users establish a designated phone number through AlertSite integrated CPaaS provider as MFA OTP recipient, and securely and effectively apply the MFA OTP received into monitor associated whenever required.

In AlertSite, our motto is that synthetic monitoring should never cry wolf. That’s why we’ve introduced conflict-resolving mechanisms, timeouts handling, and the ability to assign multiple phone numbers to one account. This way, our users can be sure that they can trust their monitors.

The MFA feature is already available in the SaaS version of AlertSite and will soon be available for private networks monitoring.

Learn how to set up MFA monitor in AlertSite using DejaClick recorder:

Why it’s Important to Comprehensively Monitor the Authentication Process

Previously, companies faced significant challenges in efficient monitoring of transactions that required MFA codes. They were often left with limited options like disabling MFA security for test accounts or sometimes were unable to monitor applications protected by MFA at all. Some companies set up custom MFA solutions integrated with their synthetic monitoring system of choice.

Possible solutions to the problem were far from ideal, and not only could they not provide the proper level of monitoring coverage, but they also could compromise product security by creating an attack vector of improperly secured test accounts.

With the advent of MFA support in AlertSite, organizations can now seamlessly configure synthetic monitors that accurately reflect real-world user experiences, including MFA code inputs. By eliminating the need for impractical workarounds, businesses can efficiently evaluate the availability, response time, and functionality of their applications throughout the MFA authentication process.

What’s Next

The introduction of SMS-based MFA monitoring to AlertSite marks the initial step in our comprehensive journey to bolster MFA support in synthetic monitoring.

As we strive to provide industry-leading solutions for complex transactions monitoring, we eagerly anticipate receiving feedback from our users on how they’re using MFA within the applications they monitor. Feel free to share your MFA experience with us at [email protected].

If you don’t have AlertSite account but you would like to try MFA capabilities of AlertSite, start a free trial and see for yourself how you can leverage MFA monitoring to provide the best level of service to your users.