How to set Fail Mode in Rublon MFA connectors?

Modified on Tue, 3 Nov at 10:26 AM

Decide what happens when the Rublon MFA connector fails to perform Multi-Factor Authentication (MFA).

Refer to the following table of connectors to learn how to set the Fail Mode option in each of them.

Connector / Integration	Name of the option	Comment
Rublon Authentication Proxy integrations	fail_mode	fail_mode is an option in the proxy_servers section in your configuration file in rublonauthproxy/config “bypass” by default
Rublon Access Gateway integrations	Settings → Rublon → Rublon Two-Factor	“Bypass” by default
Windows Logon / RDP	FailMode	To bypass 2FA when Rublon servers are unavailable, set FailMode to bypass in Windows Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Rublon\WindowsLogon
Remote Desktop Gateway	failMode	failMode is an option in Windows Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Rublon\RDG “bypass” by default
RD Web Access	FailMode	FailMode is an option in Windows Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Rublon\RDWeb “bypass” by default
RD Web Client	FailMode	FailMode is an option in Windows Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Rublon\RDWeb “bypass” by default
Outlook Web App (OWA)	FailMode	FailMode is an option in Windows Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Rublon\OWA “bypass” by default
Active Directory Federation Services (AD FS)	FailMode	FailMode is an option in Windows Registry: HKEY_LOCAL_MACHINE\SOFTWARE\RUBLON\ADFS “bypass” by default
Linux SSH	failmode	failmode is an option in the configuration file: /etc/rublon.config “safe” by default (bypasses 2FA) Set to “secure” to deny access
macOS	failMode / offlineAuth	These preferences control different failure scenarios. Configure them according to the policy behavior described in the connector documentation and test the resulting sign-in behavior before deployment.
Jira / Confluence	Connection Issues	Select: Bypass Rublon 2FA or Deny access