Internship: TrustID MFA for RDP and Windows Logon

• Job Identification: 2299
• Posting Date: 21.02.2025
• Job Schedule: Full time
• Company: ELCA Security SA

About Us

ELCA Security is a subsidiary of the ELCA Group. With more than 15 years of expertise, several key solution partners and hundreds of completed cybersecurity projects, ELCA Security’s mission is to serve any company or public organisation in terms of anticipation (strategic security consulting), protection (secure architecture and encryption), detection (endpoint monitoring) and defense (incident response).

Job Description

Description

TrustID is an ELCA’s product delivering strong multi-factor authentication (MFA). It is particularly well-suited for external accesses. The privileged authentication factor is an OTP tightly coupled with the TrustID app.

In some specific scenario, we need to have MFA for logging to Windows workstation or RDP access. We would like to provide such feature to our clients.

Under Windows, user log-on is delegated to a module called credential provider (https://docs.microsoft.com/en-us/windows/win32/secauthn/winlogon-and-credential-providers). We thus want to write such a credential provider that would use TrustID to implement the authentication.

Objectives

1. Understand Windows Logon & Credential Provider mechanisms
2. Understand TrustID architecture
3. Design a solution to be able to use TrustID authenticator through Windows Credential Provider
4. Both online and offline mode must be functional
5. Ideally, the designed solution should be able to support other kind of authenticator
6. Implement this credential provider for TrustID mobile authenticator
7. Document this new feature

Depending on time available, support of other kind of authenticator can be added.

Our offer

• A dynamic work and collaborative environment with a highly motivated multi-cultural and international sites team
• The chance to make a difference in peoples’ life by building innovative solutions
• Various internal coding events (Hackathon, Brownbags), see our technical blog
• Monthly After-Works organized per locations

Skills required

• Win32 and system programming
• C++