What this video covers
- Spriv's PAM module adds Multi Factor Authentication to SSH, su and sudo on Linux and Unix.
- Users authenticate once; later transactions are validated continuously in the background.
- The login user must already exist in Spriv's end-user list and be paired with a phone before the module is installed.
- The module is built from source (configure, make, make install) and reads your company key and secret from /etc/spriv/pam.conf.
- Keep your current SSH session open and test from a second connection before you finish, so a configuration mistake cannot lock you out.
About Spriv Adaptive Multi Factor Authentication
Spriv is a patented Adaptive Multi Factor Authentication platform. It verifies the second factor out-of-band and in the background, so a user signing in from a computer and location Spriv already trusts is not interrupted, while a login that looks abnormal still has to be approved on the paired phone.
The same platform covers Windows Remote Desktop (RDP), Linux and Unix PAM for SSH and sudo, and custom applications through a REST API. Adaptive MFA sits alongside Allow/Deny push, Two-Way SMS and TOTP, so every user keeps a way in when their phone has no signal.