Multifactor authentication at a data source

1. A method, comprising:

receiving, from a client, a communication for a data source at a wrapper, the wrapper including a dispatcher and an authentication service, the dispatcher receiving the communication and being data agnostic, the communication including a header and a payload;

providing the communication from the dispatcher to the authentication service based on an inspection of the header without inspecting the payload, wherein the providing of the communication from the dispatcher to the authentication service comprises:

storing the communication at the dispatcher to prevent the communication from being forwarded to the data source;

performing, using the authentication service, authentication of the client, wherein in the event that the client is authenticated, the client is authorized to access the data source, and wherein the authentication utilizes multi-factor authentication (MFA), wherein the performing of the authentication of the client comprises:

calling, by the authentication service, an MFA utility; and

receiving, from the MFA utility, a success indication indicating whether authentication by the MFA utility is successful, wherein the MFA is configured to:

validate user identification and password from a user;

receiving a code or a response to a prompt from a separate device of the user upon validating the user identification and the password from the user; and

in response to a determination that the code or the response is received, determine that the authentication is successful; and

allowing, using the wrapper, access to the data source in the event that the authentication service determines that the client is authorized to access the data source, wherein the allowing of the access to the data source comprises:

in the event that the client is authenticated:

forwarding the stored communication to the data source; and

forwarding subsequent communication to the data source.

2. The method of claim 1 , wherein the MFA utility is a third-party MFA utility.

3. The method of claim 1 , further comprising:

preventing access to the data source if the success indication indicates that the authentication is unsuccessful.

4. The method of claim 3 , wherein the preventing access further includes:

providing the communication to the data source from the dispatcher; and

recalling the communication before processing by the data source if the success indication indicates that the authentication is unsuccessful.

5. The method of claim 3 , wherein the communication includes a first communication, wherein the dispatcher is in a step mode for the first communication, the preventing access further including:

providing the first communication to the authentication service without forwarding the first communication to the data source; and wherein the preventing access further includes

preventing access to the data source by terminating a connection to the client if the success indication indicates that the authentication is unsuccessful;

forwarding the first communication from the dispatcher to the data source if the success indication indicates that the authentication is successful;

placing the dispatcher in a stream mode if the success indication indicates that the authentication is successful;

receiving at least one additional communication from the client at the dispatcher; and

automatically forwarding the at least one additional communication from the dispatcher to the data source if the success indication indicates that the authentication is successful.

6. The method of claim 1 , wherein the dispatcher is an open systems interconnection (OSI) Layer 4 dispatcher and wherein the authentication service includes at least one OSI Layer 7 service.

7. A system, comprising:

a processor configured to:

receive, from a client, a communication for a data source at a wrapper, the wrapper including a dispatcher and an authentication service, the dispatcher receiving the communication and being data agnostic, the communication including a header and a payload;

provide the communication from the dispatcher to the authentication service based on an inspection of the header without inspecting the payload, wherein the providing of the communication from the dispatcher to the authentication service comprises to:

store the communication at the dispatcher to prevent the communication from being forwarded to the data source;

perform, using the authentication service, authentication of the client, wherein in the event that the client is authenticated, the client is authorized to access the data source, and wherein the authentication utilizes multi-factor authentication (MFA), wherein the performing of the authentication of the client comprises to:

call, by the authentication service, an MFA utility; and

receive, from the MFA utility, a success indication indicating whether authentication by the MFA utility is successful, wherein the MFA is configured to:

validate user identification and password from a user;

receiving a code or a response to a prompt from a separate device of the user upon validating the user identification and the password from the user; and

in response to a determination that the code or the response is received, determining that the authentication is successful; and

allow, using the wrapper, access to the data source in the event that the authentication service determines that the client is authorized to access the data source, wherein the allowing of the access to the data source comprises to:

in the event that the client is authenticated:

forward the stored communication to the data source; and

forward subsequent communication to the data source; and

a memory coupled to the processor and configured to provide the processor with instructions.

8. The system of claim 7 , wherein the MFA utility is a third-party MFA utility.

9. The system of claim 7 , wherein the processor is further configured to:

prevent access to the data source if the success indication indicates that the authentication is unsuccessful.

10. The system of claim 9 wherein to prevent access, the processor is further configured to:

provide the communication to the data source from the dispatcher; and

recall the communication before processing by the data source if the success indication indicates that the authentication is unsuccessful.

11. The system of claim 9 , wherein the communication includes a first communication, wherein the dispatcher is in a step mode for the first communication, wherein to prevent access the processor is further configured to:

provide the first communication to the authentication service without forwarding the first communication to the data source; and wherein the preventing access further includes

prevent access to the data source by terminating a connection to the client if the success indication indicates that the authentication is unsuccessful;

forward the first communication from the dispatcher to the data source if the success indication indicates that the authentication is successful;

place the dispatcher in a stream mode if the success indication indicates that the authentication is successful;

receive at least one additional communication from the client at the dispatcher; and

automatically forward the at least one additional communication from the dispatcher to the data source if the success indication indicates that the authentication is successful.

12. The system of claim 7 , wherein the dispatcher is an open systems interconnection (OSI) Layer 4 dispatcher and wherein the authentication service includes at least one OSI Layer 7 service.

13. A computer program product, the computer program product being embodied in a nontransitory computer readable storage medium and comprising computer instructions for:

receiving, from a client, a communication for a data source at a wrapper, the wrapper including a dispatcher and an authentication service, the dispatcher receiving the communication and being data agnostic, the communication including a header and a payload;

providing the communication from the dispatcher to the authentication service based on an inspection of the header without inspecting the payload, wherein the providing of the communication from the dispatcher to the authentication service comprises:

storing the communication at the dispatcher to prevent the communication from being forwarded to the data source;

performing, using the authentication service, authentication of the client, wherein in the event that the client is authenticated, the client is authorized to access the data source, and wherein the authentication utilizes multi-factor authentication (MFA), wherein the performing of the authentication of the client comprises:

calling, by the authentication service, an MFA utility; and

receiving, from the MFA utility, a success indication indicating whether authentication by the MFA utility is successful, wherein the MFA is configured to:

validate user identification and password from a user;

receiving a code or a response to a prompt from a separate device of the user upon validating the user identification and the password from the user; and

in response to a determination that the code or the response is received, determine that the authentication is successful; and

allowing, using the wrapper, access to the data source in the event that the authentication service determines that client is authorized to access the data source, wherein the allowing of the access to the data source comprises:

in the event that the client is authenticated:

forwarding the stored communication to the data source; and

forwarding subsequent communication to the data source.

14. The computer program product of claim 13 , wherein the MFA utility is a third-party MFA utility.

15. The computer program product of claim 13 , further including computer instructions for:

preventing access to the data source if the success indication indicates that the authentication is unsuccessful.

16. The computer program product of claim 15 , wherein the computer instructions for preventing access further include computer instructions for:

providing the communication to the data source from the dispatcher; and

recalling the communication before processing by the data source if the success indication indicates that the authentication is unsuccessful.

17. The computer program product of claim 15 , wherein the communication includes a first communication, wherein the dispatcher is in a step mode for the first communication, the computer instructions for preventing access further including computer instructions for:

providing the first communication to the authentication service without forwarding the first communication to the data source; and wherein the preventing access further includes

preventing access to the data source by terminating a connection to the client if the success indication indicates that the authentication is unsuccessful;

forwarding the first communication from the dispatcher to the data source if the success indication indicates that the authentication is successful;

placing the dispatcher in a stream mode if the success indication indicates that the authentication is successful;

receiving at least one additional communication from the client at the dispatcher; and automatically forwarding the at least one additional communication from the dispatcher to the data source if the success indication indicates that the authentication is successful.