I want to activate multi-factor authentication (MFA) for my Amazon WorkSpaces client. What steps do I need to take?
Resolution
To activate MFA for your WorkSpaces client, you first must make sure that your setup meets the following prerequisites:
Server: Your Remote Authentication Dial-In User Service (RADIUS) server is set up on-premises or in the cloud.
Traffic: You've allowed inbound traffic from the RADIUS server IP or TCP port 1812 to AWS Directory Service for Microsoft Active Directory or AD Connector.
Shared secret: You've set up a shared secret code so that the RADIUS server users can connect to AWS Managed Microsoft AD or AD Connector.