Skip to content
Docs

Mideye Documentation

What is Mideye?

Section titled “What is Mideye?”

Mideye is an on-premises multi-factor authentication (MFA) server that secures VPNs, servers, remote desktops, and applications. It integrates with your existing infrastructure via RADIUS and REST APIs, and supports multiple authentication methods including SMS OTP, push notifications, TOTP, and hardware tokens.

Key capabilities:

  • On-premises deployment — Run entirely within your infrastructure, or use optional Swedish-hosted services for push and SMS delivery
  • Multiple protocols — RADIUS for network devices, REST APIs for applications
  • Flexible MFA methods — SMS, push, TOTP, hardware tokens, and assisted login
  • Directory integration — Active Directory, LDAP, and local user stores
  • Threat protection — Mideye Shield guards against password spray, brute-force, and MFA fatigue attacks

Getting Started

Section titled “Getting Started”
TopicDescription
Pre-installation ChecklistRequirements and preparation steps
Install on RHEL/Rocky/AlmaRPM-based installation
Install on Debian/UbuntuDEB-based installation
Install on WindowsWindows Server installation
Initial ConfigurationFirst-time setup and configuration

Core Documentation

Section titled “Core Documentation”
Integrations Connect FortiGate, Palo Alto, Cisco, Check Point, Linux PAM, Windows RDS, and more.
API Reference Authentication APIs, Magic Link endpoints, and integration details.
Configuration Reference Server settings, authentication policies, and advanced configuration.
Knowledge Base Troubleshooting, certificates, operations, and best practices.

Authentication Methods

Section titled “Authentication Methods”

One-time passwords delivered via SMS. Works with Swedish and international providers with multiple connections for redundancy.

Architecture Overview

Section titled “Architecture Overview”
Mideye Server(Your Infrastructure)Mideye Switch(European DCs)Mideye Shield(Threat Intel)Mideye Plus(Push Service)MAS(Magic Link)SMS / RCSProvidersYubicloud(YubiKey)Apple Push(APNs)Google Push(FCM) HTTPSHTTPSHTTPSHTTPS

The Mideye Server runs on-premises and communicates with optional European-hosted services:

  • Mideye Switch (European data centers) — Routes SMS/OTP messages and validates hardware tokens
  • Mideye Shield — Threat intelligence and IP reputation
  • Mideye Plus — Push notification service for mobile authentication (via Apple/Google)
  • MAS — Magic Link approval pages

For environments requiring no external dependencies, use TOTP and hardware tokens which operate entirely on-premises.

Deployment Options

Section titled “Deployment Options”
ModelDescription
On-PremisesFull local deployment. Authentication handled locally with TOTP and hardware tokens. No external network dependencies.
HybridOn-premises server with Swedish-hosted Mideye Switch for SMS/push delivery.
Central APIDirect API integration with Mideye-hosted authentication service for web applications.

Resources

Section titled “Resources”
Downloads Server packages, client tools, and mobile apps.
Release Notes Latest changes, upgrade notes, and version history.
Previous Versions Documentation for Mideye Server v5 and v4.
Support Contact support or access the customer portal.