We are moving to Hosted and our Box Office Staff need OTP tokens.
Other than fish tokens has anyone used the Mobile ID for Windows with Acive Directory for those staff memebers that move locations but can't be whipping a phone out in front of customers?
Hop onto terminals when an individual has next logged in. Create an individual chrome profile for them, save a shortcut on their local user desktop (not the public desktop). Pin it to Task bar. Bookmark the Tessitura login link.
Install the desktop token (Name it appropriately) Set a pin to secure to the token.
Ask users to login on the newly created local chrome profile and save their login credentials.
Train their muscle memory to not save over their password with their OTP when prompted.
The login details are now secured by their windows log in, token and password*
*Make sure their windows password is set to be updated every 90 days and they are not using IT vendor supplied passwords - IT can help with this.
It’s secure just fiddly to set up at the start but it’s similar to installing individual Tessitura user icons per computer in old self hosted set up before groups policy allowed DBA’s users to push them to public desktops for everyone in a Tessitura User Group.
Thanks Lou. That makes sense. Will give it a crack.