OpenText NetIQ Advanced Authentication Community

Debian 11 and 12 support

JSINFO

MFA Advanced Authentication 6.4.x - Debian 11 and 12 support for PAM Linux Client, is this functionality on the roadmap for this or a future version?
- 1 month ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Locale Cache Timer App

ChristophG

"It could be useful for some users to have a local cache timer (if the 'Cache options' policy is activated and set to xxx), where the user can see when the local cache expires."
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support for Multi-Factor Authentication on Non-Domain Linux Machines

DennisM1

We came across the following entry in your documentation: "Advanced Authentication does not support multi-factor authentication to a Terminal or SSH for domain users when a Linux machine is used in a non-domain mode." https://www.netiq.com/documentation…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
APM application allows a low-privileged user to gain access to information

Stephen Hulme

Finding We identified that the APM application allows a low-privileged user to gain access to information related to deployed applications through the application monitor section and retrieve technical information via a custom report module, which is…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
APM application allows unauthorized users to gain access via non-expired cookies of a logged out session

Stephen Hulme

Finding We identified that the APM application allows unauthorized users to gain access via non-expired cookies of a logged out session. The application does not revoke the cookies when the user logs out, which means that an attacker can use the cookies…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
APM application uses outdated, unsupported and vulnerable software

Stephen Hulme

Finding We identified that the APM application uses outdated, unsupported and vulnerable software. These software packages have publicly known vulnerabilities and in some cases no longer receive security updates and/or support from their vendors. We identified…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Remediate vulnerability to Cross-Site Scripting (XSS) in APM Component Gallery

Stephen Hulme

Finding We identified that the APM application is vulnerable to Cross-Site Scripting (XSS) in its Component Gallery. Any user with administrative access can request a component from an external source and store it in the Component Gallery. When the component…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support Windows2k22 for Advanced Authentication

craigcia

Hello- Currently run Remote Desktop Services on W2k16. Iuse the RDGateway plugin to perform Multi-Factor-Authentication. I deployed a W2k22 server to provide Remote Desktop Services for my users, but AA does not support W2k22. In testing I receive…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

Elfstone

Microsoft's own "Authenticator" app now supports enrolling it as a "passkey" that can be used to authenticate to Microsoft Azure joined Windows 10/11 PC's, sending push notifications to grab the user's attention to their phone app, but instead of revealing…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
FIDO2 support to login to MacOS

Elfstone

Advanced Authentication as of AA 6.3.6 has supported logging into the Windows OS itself via FIDO2 for nearly 2 years. This even predates Microsoft's own efforts to add native Windows OS logon support for FIDO2 which has only recently arrived. FIDO2…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Citrix NetScaler higher version support

Peter Hutinski

Opening an i dea for include and support higer Citrix NetScaler versions. NetIQ only supports Citrix Netscaler version up to NS11.0. On newer version NetIQ Smartphone authentication works sometimes. But its annoying for users to resubmit login at Netscaler…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Improve user traceability in logs

Antonio Castillo Rodríguez

- We request that the WebAuth logs include a unique oauth session identifier and include the uid and the event to be able to trace the user ○ In 6.4.1 an auth tracking identifier is included that allows the oAuth session to be identified at all times…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow RADIUS Client Method To Skip Password

TG920

Use Case: Integrating SSPR and RADIUS Server (DUO, Symantec VIP, etc) to perform forgotten password flow. Current Issue: RADIUS Server can be set to accept user name to send push to user without authentication. Advanced Auth will not send the request…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support for transferring the authenticators to a new device

Yaron Asher

When moving to another device, instead of having to re-add all the different authenticators from their website/app. The transfer can be done using QR scanning (general or per authenticator), export-import of a file etc.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Improve AA's HTTPS aka REST API "Rate Limiting Options" parameter to consider X-Forwarded-For Request Header

Elfstone

https://www.netiq.com/documentation/advanced-authentication-63/server-administrator-guide/data/rate_limiting_options.html As described in the latest AA 6.4 documentation, the current rate limiting feature is virtually useless to organizations of any…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Competitive feature request: Add "Number Matching" to Pushes via NetIQ Auth app to guard against MFA Fatigue attacks

Elfstone

A social engineering technique called 'MFA Fatigue', aka 'MFA push spam', is growing more popular with threat actors as it does not require malware or phishing infrastructure and has proven to be successful in attacks. Here's a good, recent description…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA's OSP aka OAuth webservices lack client session resiliency among cluster members

Elfstone

Client sessions to the Advanced Authentication’s OSP feature that facilitates NAM’s “Generic” aka OAuth method of integration lack resiliency across cluster members. In our case, and likely many other customers, we have two AA Webservers front-ended…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA support for Microsoft HoloLens

Elfstone

Micro Focus Advanced Authentication is currently shutting itself out the growing market of Microsoft HoloLens, and thereby putting themselves at risk of being abandoned by prospective and existing customers such as us who need an MFA solution that can…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Advanced Authentication backup method for off-loading via sFTP should work over port 22

Douglas Kerr

I am told by Support that off-loading backups remotely on Advanced Authentication only works over port 21. We would like to request an enhancement where this works over the sFTP port (Port 22).
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Option to strip AA's "REPO\" prefix when handing username down Linux PAM stack to other modules

Elfstone

AA Linux PAM Client should have an option to leave out its internal "REPO\" prefix when handing a username down the PAM stack to other auth/account/session/password modules. Today, when we use AA’s “pam_aucore.so” to authenticate users, once the user…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
PAM Client support for IBM AIX

Elfstone

AIX is IBM's enterprise class UNIX distribution. IBM AIX, versions 7.2 and 7.3 are the primary versions to target for support. The PAM Client should at a minimum be functional for SSH, for both domain mode and non-domain mode, and for AIX servers that…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow AA authentication for SSH on Linux servers not joined to an AD domain

Elfstone

AA today doesn't officially support PAM-integration to SSH authentication using AA on Linux servers that aren't joined to an AD domain: https://www.netiq.com/documentation/advanced-authentication-63/linux-pam-client/data/scrng_ssh.html There are a…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Windows Client Zenworks DLU

RRLAG

Add support for the Zenworks Agent to leverage Dynamic Local User policies to create user accounts on non-domain joined machines. Additionally allow the ability to auto-map AA accounts to local accounts without needing to unnecessarily prompt the user…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA Device Service support for Windows 10 IoT kiosks

Elfstone

Micro Focus Advanced Authentication is currently shutting itself out the growing market of Windows 10 IoT kiosks, and thereby putting themselves at risk of being abandoned by prospective and existing customers such as us who need an MFA solution that…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA OSP (SAML/OAuth) should allow external Signing/Encryption certs

Elfstone

We've been unable to integrate AA OSP (SAML/OAuth) with certain major IT systems (Palo Alto, for one) inside our company specifically because AA's OSP forces you to use self-signed SAML/OAuth Signing certificates. It's not that its a problem that AA is…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas

Menu

OpenText NetIQ Advanced Authentication

Debian 11 and 12 support

Locale Cache Timer App

Support for Multi-Factor Authentication on Non-Domain Linux Machines

APM application allows a low-privileged user to gain access to information

APM application allows unauthorized users to gain access via non-expired cookies of a logged out session

APM application uses outdated, unsupported and vulnerable software

Remediate vulnerability to Cross-Site Scripting (XSS) in APM Component Gallery

Support Windows2k22 for Advanced Authentication

Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

FIDO2 support to login to MacOS

Citrix NetScaler higher version support

Improve user traceability in logs

Allow RADIUS Client Method To Skip Password

Support for transferring the authenticators to a new device

Improve AA's HTTPS aka REST API "Rate Limiting Options" parameter to consider X-Forwarded-For Request Header

Competitive feature request: Add "Number Matching" to Pushes via NetIQ Auth app to guard against MFA Fatigue attacks

AA's OSP aka OAuth webservices lack client session resiliency among cluster members

AA support for Microsoft HoloLens

Advanced Authentication backup method for off-loading via sFTP should work over port 22

Option to strip AA's "REPO\" prefix when handing username down Linux PAM stack to other modules

PAM Client support for IBM AIX

Allow AA authentication for SSH on Linux servers not joined to an AD domain

Windows Client Zenworks DLU

AA Device Service support for Windows 10 IoT kiosks

AA OSP (SAML/OAuth) should allow external Signing/Encryption certs

Resources

Menu

Popular Tags

Resources