NT Desktop MFA

[s2vjr]

Hi -

Ideally, I'd like to use multi-factor authentication on my NT account. This is easily accomplished on the web side. However, if multi-factor authentication is enabled on the web side, there's no way to connect through NT Desktop. So, in order to use NT Desktop, I have to disable multi-factor authentication. Are there any plans for the NT Desktop platform to support multi-factor authentication logins?

Sal

[NinjaTrader_LuisH]

Hello s2vjr,


Thank you for posting on the NinjaTrader forums.

I'm not sure that I understand the unexpected behavior, are you mentioning that you cannot log into the platform after enabling MFA? Typically when you sign into the NinjaTrader Desktop application and it does not recognize the device it will trigger an email that you can then approve.

Is this not the case in this instance?


Thank you in advance!

[s2vjr]

Hi Luis - yes, that is correct. When I had MFA enabled, it worked great and I was able to verify and confirm my login with a passkey on my phone. However, this only worked if I logged on to NT thru a web browser. Having MFA enabled does not allow me to log on to NT Desktop. It appears that NT Desktop does not know how to ask me to verify my login with a secondary login method.

I just tried again because this issue had occurred when I first opened up my account and before I received my new PC.

Once again, I enabled MFA and have no problems logging on to NT thru a web browser. When I attempted to log on to NT Desktop, with MFA enabled, a message appeared at the top of the NT Desktop login dialog box stating that I need to confirm this login by checking my e-mail. I pulled up the email from NT and selected the green approve button. This action opened up a browser window asking me to select "Approve Device", "Authenticator App" or "Security Key".

I selected "Security Key" since I'd like to use the saved passkey on my phone. Nothing happened so I hit the back button on the browser thinking I would select "Authenticator App". At this point I believe things got hosed up and now I'm completely locked out of my account.

I sent an e-mail to support to unlock my account.

Back to the original problem, I'm still not clear if I can enable MFA and use NT Desktop. Is this possible? If so, am I restricted to a certain verification method or will all 3 methods work, specifically, "Approve Device", "Authenticator App" or "Security Key". My preference would be to use "Security Key", meaning the saved passkey on my iPhone.

Thank you for your help.

[s2vjr]

The exact message at the top of the NT Desktop login dialog box is "You have 2-factor authentication enabled and are logging on from a new machine. Please check your email to approve this machine."

Subsequent attempts to log on to NT Desktop displays this message, but no email is sent for me to approve my machine. I checked my junk mail to be sure and there's no email from NT. And this new machine is the machine I'm already logged on thru the browser, so it's not new to NT.

[s2vjr]

I'm back in my account, and the only way I see to be able to logon to NT Desktop is to completely disable MFA. Please let me know if I'm mistaken. I just tried enabling MFA, couldn't log on to NT Desktop, and ended up locking out my account.

On top of this, I'm now greeted by a captcha when I log on to NT Desktop. This is terrible; I hate these. Is this a new feature? It would be much better to enable NT Desktop to use security keys, specifically passkeys stored on a phone, to harden security thereby allowing another layer of protection from unauthorized logins.