Important: To use Google Authenticator, the time on a user device must be in sync with the time set on the RAS Connection Broker server. Otherwise, Google authentication will fail.
Google Authenticator is supported in Parallels Client running on all supported platforms, including mobile, desktop, and Web.
To use Google Authenticator, a user needs to install the Authenticator app on their iOS or Android device. Simply visit Google Play or App Store and install the app. Once the Authenticator app is installed, the user is ready to connect to Parallels RAS using two-factor authentication.
To connect to Parallels RAS:
- The user opens Parallels Client or Web Client and logs in using his/her credentials.
- The multi-factor authentication dialog opens displaying a barcode (also known as QR code) and a secret key.
- The user opens the Google Authenticator app on their mobile device:
- If this is the first time they use it, they tap Begin and then tap Scan a barcode.
- If a user already has another account in Google Authenticator, they tap the plus-sign icon and choose Scan a barcode.
- The user then scans the barcode displayed in the Parallels Client login dialog.
If scanning doesn't work for any reason, the user goes back in the app, chooses Enter a provided key and then enters the account name and the key displayed in the Parallels Client login dialog.
- The user then taps Add account in the app, which will create an account and display a one time password.
- The user goes back to Parallels Client, clicks Next and enters the one time password in the OTP field.
On every subsequent logon, the user will only have to type their credentials (or nothing at all if the Save password options was selected) and enter a one time password obtained from the Google Authenticator app (the app will continually generate a new password). If the RAS administrator resets a user (see the Reset Users(s) field description at the beginning of this section), the user will have to repeat the registration procedure described above.