Aladdin 2FA

The main articles are:

• Multivariate (two-factor) authentication
• Mobile apps

Aladdin 2FA - mobile application for generating one-time passwords, allowing you to expand the capabilities (servers authentications JaCarta Authentication Server JAS)

2023

Version 1.2.2.32 for Aurora OS with push authentication function

Aladdin and Open Mobile Platform announced on August 10, 2023 the release of an updated version of Aladdin 2FA for OS - 1.2.2.32 to strengthen the security of the mobile operating system.

The Aladdin 2FA application turns mobile phones the OS Aurora into an OTP or PUSH token. Application fully compatible with other products of Aladdin: JAS,, and JMS SecurLogon allows you to implement on both authentication server desktop equipment with various Russian and foreign OS.

The addition to the version of the application 1.2.2.32 is the push authentication function: an interactive login method that allows you to confirm authentication directly in the Aladdin 2FA application in Aurora OS. This authentication method can be used in various corporate information systems and services. At the same time, the user sees where the login request comes from, and can independently decide whether to provide access or not. This is especially important when identification data the user has been compromised.

The following scenarios for using push authentication are possible: protection of connections to remote access gateways and desktops, corporate systems (CRM, portals, email, etc.), web applications, sites and cloud services, VDI and VPN.

The release of the Aladdin 2FA application turned out to be especially relevant against the background of the desire to protect corporate users from theft information personal data leaks. and the release went testing to quality, and the manufacturer guarantees full support for this version, as well as all subsequent ones.

The two-factor authentication function is quite in demand among our customers. We are pleased that Aladdin is developing its products for Aurora OS devices and welcome the advent of high-quality solutions. The updated Aladdin 2FA application really makes the authentication process much more convenient and secure, "commented Maxim Piskarev, director of ecosystem development at Aurora.

Support for Manual Authenticator Registration

On January 30, 2023, Aladdin R.D. announced the release of an update to the Aladdin 2FA mobile application. An updated version of the Aladdin 2FA mobile app is already available in the App Store, Play Market, App Gallery, RuStore, RuMarket and NashStore.

Aladdin 2FA is a two-factor authentication software solution deployed in conjunction with JaCarta Authentication Server (JAS).

It consists of a mobile application and a service deployed in the customer's infrastructure. The mobile application implements the functions of a one-time password generator (OTP) and a PUSH authenticator. It allows access to enterprise VPN, remote desktop, corporate systems (e-mail, corporate portals, CRM), etc.

Aladdin 2FA implements the function of secure transmission of a user authenticator at the registration stage, allows you to use PUSH authentication as a second factor, and also allows you to gain full control over user mobile authenticators: release unclonated authenticators, track their activation status, remove them from the memory of a mobile device directly from the JAS console.

Updated features:

• The function of manual registration of authenticators (without scanning the QR code) is supported;
• Significantly improved the stability of PUSH notifications delivery to mobile devices.

2022: Aladdin 2FA with Aurora OS support

For mobile OS "Aurora" , an application for generating disposable passwords Aladdin 2FA has appeared. This was announced on December 15, 2022 in the company. "Open Mobile Platform" The application will allow you to work authentications with OTP-based services.

The Aladdin 2FA mobile application is part of a two-factor authentication software solution deployed in conjunction with the JaCarta Authentication Server (JAS). The solution implements the function of secure transmission of the user authenticator (OTP, about the English One Time Password) at the registration stage, and also provides complete control over the user mobile authenticators: the release of uncloned authenticators, tracking their activation status.

Aladdin 2FA, together with JaCarta Authentication Service, protects the authenticator during its transfer to the user:

• the user receives his authenticator over a secure channel;
• the released authenticator may be installed on only one device;
• the released authenticator cannot be cloned or transferred to another device.

Aladdin 2FA implements the protection of the secret transmitted to the user. Aladdin 2FA transmits a secret differently than open systems do - the secret is transmitted over an encrypted channel, in response to a request from the user. Instead of a secret, the user receives a registration invitation. The invitation can only be used once. The measures provided will not allow the attacker to intervene in the user's registration procedure to intercept his secret, - said the product developer Aladdin R.D.

The Aladdin 2FA mobile application supports all common one-time password generation standards: TOTP (RFC 6238) and HOTP (RFC 4226). In addition to being used in conjunction with JAS, the Aladdin 2FA mobile application can be used as an authenticator with all OTP-authenticating services, as it allows you to work in standard, unprotected mode.

For December 2022, Aladdin 2FA is equipped with support for the following operating systems:

• iOS 12 and above
• Android 8 and up
• "Aurora" 4 and up
• Ubuntu 18.04.4 LTS
• Astra Linux 1.6