OpenText NetIQ Advanced Authentication Community

Card/NFC method supported for Android Tablets

Erik Blick

Dear AAF Team, Today the authentication using the NFC tag works only on the NFC supported Android smartphones. Tablet is not supported in this process. According to OT analysis, there is a problem of using tablets, and that is that Chrome (and other…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
HOTP Key

Oliver Kannenberg

Hello, To set up HOTP with the Yubikey, the AAF server needs the Secet Key generated by the Yubikey. Unfortunately, this is no longer state of the art. The personalization tool from Yubico has already been discontinued and the successor Yubico Authenticator…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Passkey support with WebAuthn standard

brichtering

Since AAF already supports WebAuthn, we would like it to also support the so-called passkey authentication method. A passkey is a type of authentication method that allows users to access online services without using passwords. Passkeys use asymmetric…
- 6 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Make FIDO2 Method Sharable

DennisR1

We would like to have FIDO2 added to the list of methods which are shared between user accounts. The documentation states that currently only TOTP, HOTP, Password, Fingerprint, Card, Flex OTP, FIDO U2F, and RADIUS Client can be shared. It would be ideal…
- 9 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support for SecuGen HU20 Fingerprint Reader for Fingerprint Enrollment, Authentication and HANIS fingerprint Validation.

Felicity Chapman

Problem: we are running Advanced Authentication version 6.4 and we are unable to Enroll for fingerprint, authenticate using fingerprint authentication or validate against HANIS using HANIS fingerprint using the SecuGen HU20 fingerprint reader. Use Case…
- 10 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Removing the save button for the smartphone push enrollment for users that are already enrolled for Smartphone push

Felicity Chapman

Problem: Users are able to re-enroll for smartphone push, when logged into the enrollment portals and clicking on the enrolment tile and clicking save. These enrollments are new enrolments, making the old enrolment no longer usable. We are not able to…
- 10 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Auto enrolled methods should auto delete if underlying data is removed

bmrussell

When a user is added to AD with an email address the email otp method is auto enrolled. Furthermore, when the email address attribute is removed from AD on a user the email otp auto enrollment is retained but the email address is removed from AAF. When…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
TACACS support

PetroF

Hello Team, We would highly appreciate TACACS integration support in addition to the existing RADIUS support. As many network our devices are configured using TACACS protocol. Having TACACS supportted into your product would greatly benefit our organization…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

Elfstone

Microsoft's own "Authenticator" app now supports enrolling it as a "passkey" that can be used to authenticate to Microsoft Azure joined Windows 10/11 PC's, sending push notifications to grab the user's attention to their phone app, but instead of revealing…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
FIDO2 support to login to MacOS

Elfstone

Advanced Authentication as of AA 6.3.6 has supported logging into the Windows OS itself via FIDO2 for nearly 2 years. This even predates Microsoft's own efforts to add native Windows OS logon support for FIDO2 which has only recently arrived. FIDO2…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Authenticator Export for Seamless Smartphone Transition

DennisM1

I am writing to request a new feature that would enhance the user experience and streamline the transition between smartphones for users of the NetIQ application. Specifically, I propose the implementation of an authenticator export function similar to…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Improve user traceability in logs

Antonio Castillo Rodríguez

- We request that the WebAuth logs include a unique oauth session identifier and include the uid and the event to be able to trace the user ○ In 6.4.1 an auth tracking identifier is included that allows the oAuth session to be identified at all times…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
implement rate-limiting on the push notification to overcome the attack of overwhelming push notifications with Smartphone method

kgast

With a compromised user account (password) it would be possible to start a push notification bombing attack with the goal that the user will finally run an "Accept" within the smartphone app giving full access to the user account. Mitigating this kind…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
OOB UI page times out after 5 minutes

AlisiaP

It would be desirable to have the oob/ui webpage have a configurable timeout setting. In some cases, the user must login to multiple applications repeatedly using the OOB and the 5 minute time out makes this problematic. The use case specifically that…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Out of Band Push Notifications

AlisiaP

When using the OOB/ui webpage, the users has to refresh to receive a new Authentication Request. It would be useful if these were done in a PUSH format instead.
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA Support More Built-in NFC Readers for HID Card Methods

ruggerij

Our HP laptops have the NFC reader option built into them. We wanted to use our employee badges for MFA using the card reader method. Our employee badges are made by HID and support NFC and RFID protocols. The hardware on our HP Elitebooks uses NXP…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow RADIUS Client Method To Skip Password

TG920

Use Case: Integrating SSPR and RADIUS Server (DUO, Symantec VIP, etc) to perform forgotten password flow. Current Issue: RADIUS Server can be set to accept user name to send push to user without authentication. Advanced Auth will not send the request…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Passport/Document Validation

mskosan

Current Challenge We currently have no mechanism to validate identity documentation provided by users. Possible Solution Create a new method in AAF that is able to validate identity documentation using 3rd party services. Success Factors …
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow FIDO2 Method to have Configurable Options

Dennis Robare

The FIDO2 method should have some settings made available when editing/managin the method. It would be very helpful/useful if the UserVerificationRequirement attribute could be configured to discouraged for example . This would allow for the relying party…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Extend "Lockout options" police to PushNotification

Amilton S Filho

The case of Uber could be prevent in our AAF if we could extend the Lockout option to PushNotification as well. Not just the OTP/Password. Considering that we don't have a default police on Risk Services for that.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
webauthn Paramters for FIDO2 Method

DennisR1

It would be beneficial to have the ability to set some optional webauthn parameters. In particular, the UserVerficationRequirement would be configurable to allow for the changing of the default behavior for FIDO2 tokens to require a "device pin" to protect…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

Felicity Chapman

As a security concern, we would like the option to remove the "cancel" button on the second factor prompt on OAuth integrations for Fingerprint, Smartphone push, TOTP, and SMS OTP methods.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
allow the customer to set there preference for the rpid for the fido2 method

bmrussell

Customers should be give more flexibility to allow the rpid to be set to either the domain name or the host name when the fido2 method is enrolled. So, you can have the fido2 method by default set the rpid to domain name and have the option to change…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow more than one device to be registered in smartphone method

Scott Malugin

Allow more than one device to be registered in smartphone method. Have both my iPhone and iPad registered to approve the auth or use the pin from the either aa app.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
To support smartphone push OTP (Online OTP) in ADFS Plugin

fteo1

As notice that there is limited authentication method support in ADFS, request to add smartphone push OTP (Online OTP) authentication method in ADFS Plugin
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas

Menu

OpenText NetIQ Advanced Authentication

Card/NFC method supported for Android Tablets

HOTP Key

Passkey support with WebAuthn standard

Make FIDO2 Method Sharable

Support for SecuGen HU20 Fingerprint Reader for Fingerprint Enrollment, Authentication and HANIS fingerprint Validation.

Removing the save button for the smartphone push enrollment for users that are already enrolled for Smartphone push

Auto enrolled methods should auto delete if underlying data is removed

TACACS support

Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

FIDO2 support to login to MacOS

Authenticator Export for Seamless Smartphone Transition

Improve user traceability in logs

implement rate-limiting on the push notification to overcome the attack of overwhelming push notifications with Smartphone method

OOB UI page times out after 5 minutes

Out of Band Push Notifications

AA Support More Built-in NFC Readers for HID Card Methods

Allow RADIUS Client Method To Skip Password

Passport/Document Validation

Allow FIDO2 Method to have Configurable Options

Extend "Lockout options" police to PushNotification

webauthn Paramters for FIDO2 Method

Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

allow the customer to set there preference for the rpid for the fido2 method

Allow more than one device to be registered in smartphone method

To support smartphone push OTP (Online OTP) in ADFS Plugin

Resources

Menu

Popular Tags

Resources