UPDATED:  Hi Freek,  It seems that you can secure your virtual desktops/published apps using a client assignment based upon device IP Addresses, where the scope is an allowable IP range and your Web Access server(s) are within that range. This will prevent users from using AppPortal to circumvent any 2FA that you put in place on Web Access.  We have a roadmap item to include 2FA at the broker, thus supporting 2FA in AppPortal in a future release so you will also be able to secure it this way as well at a later date.  Hope this helps.  Thanks  -Keith
Considering the following environment:  - vWorkspace Connection broker - Vworkspace Web Access - Remote Desktop Session Host farm  Lets say vWorkspace Web Access is configured to use two-factor authentication by using for example a RSA Radius server with RSA tokens.  Would it be possible for a user if he would have knowledge of the FQDN of the Connection Broker and the TCP port that it uses to install the vWorkspace AppPortal client, enter the correct information ofthe broker and access the environment bypassing the two-factor authentication?  Hopefully this does not work, but I'm wondering how this is secured.  Kind regards, Freek Berson [URL]  [IMAGE]
bypassing two-factor authentication