Choose a Product
Your AuthNull stack is running and you can sign in to the tenant. Now pick the product you want to try.
Step 1: Sign In to the Tenant
- Domain mode:
https://default.customer-org-name.customer-domain.com - Bare-IP mode:
http://SERVER_IP/tenant/login
On first sign-in you are asked to set up a second factor - an authenticator app code (TOTP), a passkey, or a push. Passkeys need a domain, so on a bare-IP install use TOTP.
Step 2: Choose an MFA Provider
Before trying any product, choose how pushes are delivered: open the account menu (top right), then Settings → MFA Provider, and set up Duo Security or Okta Verify (the AuthNull Authenticator app is coming soon). See MFA Providers.
Step 3: Switch to a Product
Open Switch product at the top of the sidebar and choose the product you want to try. Each one has its own guide:
| Product | What it protects | Guide |
|---|---|---|
| Identity | Directories, users, and Windows sign-in MFA | Identity MFA |
| Database | MFA for database access (PostgreSQL, MySQL) | Database MFA |
| RADIUS | MFA for VPN and network devices | RADIUS MFA |
| PAM | Privileged SSH access to servers | PAM MFA |
You can switch between products at any time; your users, MFA provider, and settings are shared across all of them.
Agents and gateways that each product installs (for example the database agent and ProxySQL, or a PAM gateway) can run on this same server. Where a guide asks for the AuthNull address, use SERVER_IP (bare-IP mode) or your on-premises domain.
If something does not work, see Troubleshooting.