Multi-Factor Authentication (2FA/MFA) for Kemp LoadMaster

Last updated on July 1, 2026

Overview of MFA for Kemp LoadMaster

Multi-Factor Authentication (MFA) for Kemp is an extra layer of security that requires users to provide two authentication factors to gain access. This additional security measure prevents unauthorized users from gaining access to the resource even if they have the user’s login credentials. Enabling Two-Factor Authentication (2FA) or Multi-Factor Authentication (MFA) for Kemp ensures that users successfully complete both authentication factors – such as entering their Active Directory / RADIUS username and password, and then completing a secondary authentication method like a Mobile Push or Email Link – before granting access to the resource.

Rublon MFA integrates with Kemp Load Balancer to enable Two-Factor Authentication (2FA) and Multi-Factor Authentication for users logging in to Kemp.

Rublon MFA introduces Multi-Factor Authentication in a number of ways.

Rublon Authentication Proxy is used for integration via the RADIUS and LDAP(S) protocols.
Rublon Access Gateway is used for integration via the SAML protocol.

Note that both Rublon Authentication Proxy and Rublon Access Gateway can be used for both RADIUS and LDAP(S) authentication sources.

Enable Entra ID logins to Kemp LoadMaster using Rublon MFA

If Kemp LoadMaster authenticates users through LDAP or RADIUS, you can use Rublon Authentication Proxy to validate primary credentials against Microsoft Entra ID and then enforce Rublon MFA. This allows users to sign in to Kemp LoadMaster with Microsoft Entra ID credentials, even when Kemp LoadMaster does not support Microsoft Entra ID, SAML, OAuth 2.0, or OpenID Connect natively.

See how to authenticate LDAP and RADIUS with Microsoft Entra ID credentials and MFA, or explore the related use case: Microsoft Entra ID logins for LDAP and RADIUS applications with MFA.

Before you start

Ensure you have properly configured Kemp.

Ensure that you have properly set up your authentication source, that is, an external Identity Provider (IdP) like FreeRADIUS, FreeIPA, OpenLDAP, or Microsoft Active Directory.

Configuration of MFA for Kemp LoadMaster

MFA for Kemp LoadMaster using RADIUS

Integrate Kemp LoadMaster with Rublon MFA to introduce Two-Factor Authentication (2FA) to your logins. You have to install and configure Rublon Authentication Proxy before configuring Rublon 2FA for Kemp using RADIUS.

How to enable MFA for Kemp LoadMaster – RADIUS

MFA for Kemp LoadMaster using LDAP(S)

How to enable MFA for Kemp LoadMaster – LDAP(S)

Rublon MFA for Kemp LoadMaster using SAML

Integrate Kemp LoadMaster with Rublon to introduce Two-Factor Authentication (2FA) to your logins. You have to install and configure Rublon Access Gateway before configuring Rublon 2FA for Kemp using SAML.

How to enable MFA for Kemp LoadMaster – SAML

Troubleshooting MFA for Kemp LoadMaster

If you encounter any issues with your Rublon MFA integration, contact Rublon Support.