Mideye adds multi-factor authentication to your VPNs, firewalls, and applications, on your infrastructure, under your control, with European data residency.
The problem
Phishing, credential stuffing, and brute force defeat even strong passwords. Multi-factor authentication blocks the vast majority of account-compromise attacks by requiring something users have, a phone or hardware token, not just something they know.
Regulations like NIS2, DORA, and GDPR increasingly mandate MFA for critical infrastructure, financial services, and personal data. The question isn't whether to deploy it, it's how. See the compliance framework overview for the specifics.
New to MFA? Start with the guide: What is multi-factor authentication?
Why Mideye
Most MFA providers are cloud-only, your users and authentication decisions live on someone else's servers. Mideye is different.
Mideye Server runs in your datacenter. Passwords and authentication decisions are processed locally, and your directory stays untouched, with no schema changes to Active Directory or LDAP.
The central delivery service, SMS routing, push notifications, and token logistics, is hosted in the Nordics, designed to support GDPR, NIS2, and DORA requirements.
Integrates over standard RADIUS, the protocol your VPN and firewall already speak. No agents to install, no proxies to maintain, no application changes. See integration examples.
How it works
User credentials and authentication decisions never leave your server. Only delivery requests traverse the encrypted connection to Mideye Central.
Authentication methods
Different users need different methods. Mideye supports them all, and users switch between them without admin intervention.
One-tap approval on iPhone and Android, no codes to type. Works over WiFi when mobile networks are unavailable, and reduces phishing risk since there is no one-time code for an attacker to trick out of the user.
Learn more about Mideye+
A numeric code delivered to any mobile phone, no app required. Mideye maintains direct connections to mobile operators worldwide and tracks delivery receipts in real time.
OATH-compliant tokens for environments where phones aren't allowed, YubiKey, HID, and PSKC-compatible. No battery dependency, no network: just a code.
Learn about hardware tokens
Time-based one-time passwords from the Mideye+ app or any standard authenticator. No network needed at login, ideal for air-gapped environments or as a fallback.
Learn about air-gapped modeIntegrations
Standard RADIUS means no agents, no proxies, and no application changes.
FortiGate · Palo Alto GlobalProtect · Cisco AnyConnect · Cisco ISE · Check Point · SonicWall · F5 BIG-IP
Citrix NetScaler · Citrix Gateway · Pulse Secure · Windows RDS · VMware Horizon · Apache Guacamole
Microsoft ADFS · Entra ID (Azure AD) · SAML 2.0 · OIDC → RADIUS
PAM RADIUS module · SSH authentication
Compliance
Strong authentication for critical infrastructure operators
Strong authentication for financial entities' ICT systems
Appropriate technical measures to protect personal data
MFA recommended as part of access control policies
Mideye's on-premises architecture with European data residency is designed to support these frameworks, with controls customers use as part of their own certification and compliance programs. See the full compliance mapping or learn about data residency.
Advanced capabilities
Delegated authentication for teams: a supervisor approves access in real time via push, for shared workstations, help desks, and break-glass scenarios. Group-based authorization with a full audit trail.
Learn about Assisted LoginMFA for shared and service accounts. Each user identifies with their own phone or token, creating individual accountability on shared credentials.
Learn about Shared AccountsMFA without a server: one REST endpoint for push and SMS with automatic fallback, hosted in the Nordics with EU/EEA data residency.
Explore the Cloud APIMideye Shield
Deploying MFA is step one, protecting it from attack is step two. Shield blocks brute force, password spraying, and MFA fatigue attacks before they reach your users, with threat intelligence shared across connected Mideye instances.
Request a guided trial and we'll plan a proof-of-concept together with your IT team. Our engineers help you integrate Mideye with your VPN, firewall, or application.