Aladdin 2FA by Aladdin-RD is a software solution for push and OTP authentication, enhancing the JaCarta Authentication Server (JAS). It consists of a mobile application and a server application deployed within the customer's infrastructure. Aladdin 2FA implements secure transmission of user authenticators during registration, allows the use of PUSH authentication as a second factor, and provides full control over user mobile authenticators: issuing non-clonable authenticators, tracking their activation status, and removing them from mobile devices directly from the JAS console. Aladdin 2FA supports common one-time password standards: TOTP (RFC 6238) and HOTP (RFC 4226). It ensures that QR codes or digital sequences for initializing the authenticator cannot be reused. Aladdin 2FA is available on multiple mobile operating systems and can be downloaded from various app stores. The mobile application is protected by biometrics (optional) available on the device or a PIN code. The Aladdin 2FA server connects JAS and mobile devices, issues one-time QR codes for secure authenticator transfer, tracks activation statuses, and removes them from devices if needed. The architecture of Aladdin 2FA allows placing the server in the DMZ and ensures unidirectional interaction from the internal network and from public networks. All sensitive data required for the server's operation is protected through encryption. Aladdin 2FA supports Failover cluster mode, including availability group support for MS SQL Always On databases. The Aladdin 2FA server allows for vertical load scaling, increasing solution performance as the server performance grows.
