Why am I asked for MFA twice when using RD Web Client / Access?

Modified on Tue, 30 Sep at 12:39 PM

When connecting to a Remote Desktop (RD) session via the RD Web Client or RD Web Access, you are prompted for multi-factor authentication (MFA) twice:


• Once when logging in to the RD Web Client or RD Web Access.

• Again, when starting an RDS session from inside the RD Web Client page or running the RDP file downloaded from RD         Web Access.


This can seem unusual and raise questions about whether something is misconfigured.


Why RD Web Client and RD Session Each Ask for MFA

This behavior is expected when multiple Rublon connectors are installed and active:


• RD Web Access / RD Web Client: Here, you are authenticating to the web interface. If the Rublon for RD Web connector is enabled at this layer, MFA is triggered.

• RDS Session (via RD Gateway or RDP): In the second step, you are connecting to the actual Remote Desktop Session. Authentication passes through the RD Gateway or directly via RDP, depending on your setup. If Rublon for RD Gateway or Rublon for Windows is installed, MFA is triggered again. If both are installed, MFA will be triggered twice in this second step.


Because RD Web login and RDS session connection are two separate authentication flows protecting different entry points, each one enforces its own MFA challenge. This ensures secure access to both the RD Web Client / Access portal and to the individual RDS sessions themselves.


Understanding Double MFA When Using RD Web + RDS

There is nothing wrong with your configuration. Receiving MFA prompts in both steps is the designed behavior when multiple Rublon connectors are installed.


If you want to reduce the number of MFA prompts, you can adjust your deployment to use only one connector, depending on your security requirements. However, for maximum protection, we recommend keeping both connectors active and enabling the Remembered Devices Policy on RD Web Client / RD Web Access. This way, users will be given an option to temporarily skip MFA for RD Web for a specified time period.


Helpful Links

Can I install both Rublon for RD Gateway and Rublon for RD Web on the same machine?

Rublon MFA for Windows - Documentation

Rublon MFA for RD Gateway - Documentation

Rublon MFA for RD Web Access - Documentation

Rublon MFA for RD Web Client - Documentation

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article