Adoption of Two-Factor Authentication in a Pre-Existing Heterogeneous System

Hacker attacks aimed at stealing credentials or encrypting sensitive user data are constantly increasing. For this reason, cybersecurity has become an ever more popular topic in recent years, and one on which both public administration and private companies are progressively convinced to make investments in both time and money. One of the most fragile points in security is undoubtedly authentication, which is mostly still based on a single-factor mode, especially in the case of access to virtual machines or physical computing devices. A change in access mode, however, is far from easy to enforce. In this paper we will see how it is possible to adopt two-factor authentication for system access, in a company with a considerable historical background and an heterogeneous and high amount of systems to be adapted.