When are users challenged for Rublon MFA in Windows Logon & RDP?

After installing the Rublon MFA for Windows Logon & RDP connector on your Windows machine, Rublon MFA starts challenging users for MFA on that machine.

Rublon MFA challenges users for MFA every time:

• The user signs in to their account

• The user connects to the machine via RDP

• The user unlocks the machine after previously locking it (Lock Screen)

• During User Access Control (UAC) Elevation

Rublon MFA does not challenge users for MFA:

• When exiting the Windows screensaver

• When FailMode is set to bypass, the machine cannot reach the Rublon MFA service, and Offline Mode is disabled or its requirements are not met

• When RublonRDPOnly is set to 1 and the user signs in to Windows Logon

• When the user has chosen the current device to be remembered

• When an administrator has set the user’s status to Bypass in the Rublon Admin Console

Helpful Links

Does Rublon MFA challenge for MFA after locking the screen on Windows?

Rublon MFA for Windows Logon & RDP - Documentation