Product manual

40
10.3 Override Mobile Number Field
You can specify the Active Directory field from which a user's mobile number is loaded. The "Mobile" field is used by default.
To change the mobile number field:
1. Launch the ESA Management Console.
2. Expand the node for your domain.
3. Navigate to the Advanced Settings node.
4. Expand the Default Mobile Number Field panel.
5. You will be able to select a different field to be used for loading a user's mobile number.
6. After you have selected a different field to use, click on Save.
7. Restart the ESET Secure Authentication Core Authentication Service:
a. Locate the ESET Secure Authentication Core Service in the Windows Services (under Control Panel - Administrative Tools
- View Local Services).
b. Right Click on the ESET Secure Authentication Radius Service and select Restart.
10.4 Groups Based User Management
Keeping track of which users in your domain are activated for two-factor authentication becomes hard in large domains. To solve
this problem, ESET Secure Authentication provides automatic bookkeeping for your 2FA users by means of Active Directory groups
membership.
Concretely, three active directory groups are created at installation time:
ESA Users
The ESA Users group does not contain any users directly, but contains the ESA SMS Users and ESA Mobile App Users group.
Transitive Group Membership may therefore be used to locate all 2FA users in your domain using this group.
ESA SMS Users