Hello.
I work for a managed services company and we have a team of IT technicians who use the web based and LMI client to connect to client computers and servers. During a recent team meeting, we came up with a scenario whereby a compromised IT technician's computer with the LMI Client (for example) still logged in has client admin creds cached and a threat actor just got access to everyone computers. We're heavy LMI users with 100's of endpoints to manage so having to re-enter creds every time would slow us down badly so we thought a pre-connection 2FA would ensure security and be relatively quick to action.
I see this as being an option to send a 2FA to the cell phone or email. Better still could you integrate the MS Authenticator and others like the Google Authenticator?
Thanks Tim