Database MFA
AuthNull puts multi-factor authentication in front of your databases. Users connect through ProxySQL, which AuthNull installs next to a lightweight database agent. Every login is checked against a database policy, and the user approves a push on their phone before the session opens. Database passwords never leave AuthNull: the agent manages them, and users never see them.
It works the same on AuthNull Cloud and on an on-premises deployment.
Supported Databases
- PostgreSQL
- MySQL
Setup Steps
- How Database MFA Works - The components and what happens during a login
- MFA Provider and Users - Choose the push provider and enrol the users who will connect
- Agent and ProxySQL - Install the database agent and ProxySQL, and verify them
- Policies - Grant users access to a database, with or without MFA
- Connecting - Open a session from the browser, a terminal, or pgAdmin
- Troubleshooting - Known errors and their fixes