Multi factor authentication

A non-transitory computer readable medium storing computer processor executable instructions for performing steps of multi-factor authentication by a computer, the steps comprising:

• authenticating a user attempting to log in to a cloud service, using a first authentication factor;
• allowing the authenticated user to log in to the cloud service, based on a result of said authenticating;
• based on the result of said authenticating, communicating data identifying the authenticated user to a computer of an authentication service;
• receiving a first user-permission policy from the computer of the authentication service, the first user-permission policy being a policy determined by the authentication service for the user identified by the communicated data based on a result of an attempt to authenticate the user using a second authentication factor;
• and
• restricting usage of the cloud service by the user based on the received first user-permission policy.

A method of multi-factor authentication, the method comprising computer executed steps, the steps comprising:

• by a computer of an authentication service, receiving data identifying a user authenticated by a cloud service accessed by the user using a first authentication factor, and allowed to log in to the cloud service by the cloud service;
• by the computer of the authentication service, attempting to authenticate the user using a second authentication factor;
• by the computer of the authentication service, determining a first user-permission policy for the identified user, based on a result of said attempting to authenticate the user;
• and
• by the computer of the authentication service, communicating the determined first user-permission policy to a computer of the cloud service, for the cloud service to use for restricting usage of the cloud service by the user.