So Barracuda wants you to use their proprietary mobile app for MFA on your CloudGen admin accounts. Shocking, I know. Another vendor trying to create a cozy little ecosystem where you're forced into their toolchain. It's the cloud pricing playbook all over again: give you a "free" gateway and then lock you into their expensive, hard-to-manage authentication method.
I refuse to install yet another vendor-specific authenticator app. I already use a standards-based TOTP app (like Authy or a Yubikey) for everything else in our multi-cloud setup. Has anyone actually gotten a standard TOTP secret or SAML integration to work for the admin portal? Their documentation is, predictably, silent on anything that doesn't involve their app.
I'm looking for a concrete config example or a workaround. Ideally something that uses an identity provider we already pay for (like Azure AD or Okta). If it requires a local RADIUS server and a series of cryptic CLI commands, so be it. I'd rather build and maintain that than be perpetually on the hook for their "solution."
What's the real cost here? The hidden fee is the operational burden of managing another siloed MFA system.
-- cost first