From 7c8bc0990d5c2c500012e990319216795ba53124 Mon Sep 17 00:00:00 2001 From: Steve Lee Date: Mon, 23 Apr 2018 09:05:26 -0700 Subject: [PATCH] update SSH remoting doc in regards to MFA --- .../core-powershell/SSH-Remoting-in-PowerShell-Core.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/reference/docs-conceptual/core-powershell/SSH-Remoting-in-PowerShell-Core.md b/reference/docs-conceptual/core-powershell/SSH-Remoting-in-PowerShell-Core.md index 9d229a178c0..1cb28469233 100644 --- a/reference/docs-conceptual/core-powershell/SSH-Remoting-in-PowerShell-Core.md +++ b/reference/docs-conceptual/core-powershell/SSH-Remoting-in-PowerShell-Core.md @@ -147,6 +147,15 @@ In addition you will need to enable password authentication and optionally key b sudo launchctl start com.openssh.sshd ``` +## Authentication + +PowerShell remoting over SSH relies on the authentication exchange between the SSH client and SSH service and does not implement any authentication schemes itself. +This means that any configured authentication schemes including multi-factor authentication is handled by SSH and independent of PowerShell. +For example, you can configure the SSH service to require public key authentication as well as a one-time password for added security. +Configuration of multi-factor authentication is outside the scope of this documentation. +Refer to documentation for SSH on how to correctly configure multi-factor authentication and validate it works outside of PowerShell +before attempting to use it with PowerShell remoting. + ## PowerShell Remoting Example The easiest way to test remoting is to just try it on a single machine.