Adding 2FA to ConnectWise

Note: This integration does not support the use of Push. You will need to use OTP.
Note: This is a legacy integration that was build on the AuthAnvil platform (predecessor to Passly). This integration is still supported with Passly, AuthAnvil On-Premises & AuthAnvil On-Demand.

Note: This integration was built and is managed by the ConnectWise team. ConnectWise support can be reached via http://www.connectwise.com/support/

Requirements

• ConnectWise v2010.2.7908 or later installed and configured.
• An Active On-Demand tenant.
• Usernames in 2FA and ConnectWise that match.

Introduction

ConnectWise offers a powerful and flexible Professional Service Automation (PSA) system. With the use of Passly Two Factor Auth, it is possible to add strong authentication to and provide identity assurance for this system.

The rest of this document will step through the process to accomplish the implementation and configuration of Passly support on a system running ConnectWise v2010.2.7908 or later. 

Configuring ConnectWise 2010 and later to support 2FA

Step 1 – Configure the AuthAnvil Setup Table

1. Log into ConnectWise.
2. Expand the Setup tab.
3. Open Setup Tables.
4. Enter “AuthAnvil” into the Table field and click search. This will return the AuthAnvil Setup Table.
5. Open the AuthAnvil Setup Table.
6. Select https from the dropdown.
7. Enter your AuthAnvil SAS URL.
   
   Note: In ConnectWise 2014.2 and later you must use the full URL (Your Company)my.paslsy.com/AuthAnvil/SAS.asmx
   Your SAS URL will be your tenant URL/AuthAnvil/SAS.asmx
   Example: acme.my.passly.com/AuthAnvil/SAS.asmx
   
8. Enter your PasslySite ID. This will always be 1.
9. Click Save.
10. Click the Test Connection button and verify that the connection is successful.
    
    

Step 2 - Assign members to use Passly for Two-Factor Authentication

1. Log into ConnectWise.
2. Expand the Setup tab.
3. Open Members.
4. Browse to a member that you would like to have use Passly authentication for ConnectWise login.
5. Make sure the member ID in ConnectWise matches the Passlyusername.
6. Scroll to the bottom of the member screen and select AuthAnvil from the Service drop down.
   Click Save.
7. Repeat steps 3 – 7 for every member who needs to use Passly authentication.

Step 3 – Log into ConnectWise using an Passly-protected user

1. Log into ConnectWise using the regular method. After you enter your username and password, you will be presented with the following screen:
   For the Pin your users will use Pin: 0000
   Note: The actual Pin requirement was a hold over from the old On-Prem configuration. On-Demand does not use the Pin, however it respects the value being submitted.
2. Enter the current OTP on the users Passly Authenticator.
3. Click Login.