Skip to content

MFA Face Recognition⚓︎

Note: Face recognition is a flagship edition feature.

  1. Version: v4.6.0 and above
  2. Flagship edition license with 5000+ assets
  3. HTTPS access enabled

1 Configure Face Recognition⚓︎

Add new parameters

vim /opt/jumpserver/config/config.txt
#config.txt
USE_XPACK=1
FACE_RECOGNITION_ENABLED=true
FACELIVE_ENABLED=1
Restart JumpServer
jmsctl restart

2 Configure MFA Face Recognition⚓︎

  • Record facial information on the user detail page and enable MFA.

image.png

  • Log out and try logging in again, select face verification.

image.png

  • Complete facial verification within 30 seconds.

image.png

3 Asset connection face recognition and monitoring⚓︎

  • Enable Face Verification in Console > Access Control > Asset Connection. The operation can be Face Verification or Face Online.

image.png

  • Face verification is required before connecting to an asset.

image.png

  • If facial recognition does not detect the user, the session will be paused.
  • During the paused session, no operations on the asset can be performed.

image.png