How to protect Windows logins with MFA when using Google Workspace account credentials?

Modified on Wed, 16 Sep at 10:07 AM

This guide will walk you through enabling Rublon MFA for Windows using Google Workspace accounts.

Starting from version 6.1.0, the Rublon MFA for Windows connector supports only local logins via Google accounts.

This guide assumes you already have a working setup where users log in to Windows using Google Workspace accounts and now want to enable multi-factor authentication (MFA) to protect their logins. If you do not have such a setup, download and install Google Credential Provider for Windows (GCPW).

To enable multi-factor authentication (MFA) for Windows logins when using Google Workspace account credentials:

1. Download the latest Rublon MFA for Windows installer.

2. Configure the connector according to the installer type:

- EXE installer in GUI mode:

Under Configure username format, select User Principal Name (UPN). To protect local Windows logons, also clear the Prompt for MFA only for RDP logins checkbox.

- EXE installer in Silent Mode:

Set /sendUPN=1, /sendNTLM=0, and /rdpOnly=0 in the installation command. For example:

.\RublonForWindows-6.7.0.exe /verysilent /token=<token> /key=<key> /sendUPN=1 /sendNTLM=0 /rdpOnly=0

- MSI installer:

Create a .conf file containing the following configuration:

[Rublon]

Token=<token>

Key=<key>

RDPOnly=0

SendUPN=1

SendNTLM=0

Pass the file to the MSI installer using the RUBLONCONF parameter:

.\RublonForWindows-6.7.0.msi RUBLONCONF="C:\path\to\rublon.conf"

The MSI installer does not include a configuration wizard. Individual connector configuration options cannot be passed directly in the installation command.

Note: When you use User Principal Name (UPN) as the username format, ensure that every user on this computer, including users not managed by GCPW, has a UPN assigned to their account. Otherwise, the user may be bypassed or denied access, depending on the FailMode option.

3. Complete the installation and test the configuration by signing in to the Windows machine using a Google Workspace account. The Rublon Prompt should appear during the login.