OpenText NetIQ Advanced Authentication Community

Fixes for possible Vulnerabilities in the NetIQ Authenticator App

Fabian Bruggmann

The vulnerabilities and possible solutions are described below: 1.) Weakness: The local authentication used to approve a login is based on the device lock mechanism (FaceId or fingerprint). However, this mechanism can be bypassed as it is not used to…
- 1 month ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Netiq Authenticator add possibility to disable overlay apps and hide information in overview screen

Fabian Bruggmann

The authenticator app shows the TOTP in the overview screen of Android when it isn't in focus, which can be a security risk. The authenticator doesn't block app overlays and screenshots, this can also be seen as a security risk. I hope those two features…
- 2 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Add AWS SNS support for SMS OTP.

dbenjamin

On the /admin/policies/SMSSender page, add AWS SMS as a dropdown option. Pick any SDK from here: https://docs.aws.amazon.com/sns/latest/dg/sms_publish-to-phone.html#sms_publish_sdk Build new configuration screen to include AWS required attributes…
- 8 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Our company requires certain cipher suites be removed from AA per PCI requirements.

Douglas Kerr

We need to be able to remove the following cipher suites from Advanced Authentication: PCI requires we remove the below ciphers: TLS_AKE_WITH_AES_256_GCM_SHA384 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 TLS_AKE_WITH_AES_128_GCM_SHA256 In working…
- 9 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
NetIQ Authentication App

telliers

Can you modify the app to sort totp in the app. And can you add folder to place totp in specific folder, when we try in différents enviroments, we have a lot of totp
- 10 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Removing the save button for the smartphone push enrollment for users that are already enrolled for Smartphone push

Felicity Chapman

Problem: Users are able to re-enroll for smartphone push, when logged into the enrollment portals and clicking on the enrolment tile and clicking save. These enrollments are new enrolments, making the old enrolment no longer usable. We are not able to…
- 10 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Smartphone push messages for Awareness Training

Michiel Pouw

For security and awareness training it would be great if we could automatically generate smartphone push messages to see if end-users accept or decline the bogus request. Currently you might be able to use the helpdesk module or a custom application,…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Reduce storage usage NetIQ authenticator App iOs

C.l. Wong

User reviews posted on the App store and our local testers has noticed that the storage usage of NetIQ Authenticator App grows to large amounts. From our testers, where around 20 linked test accounts runs up to 5GB. Reduction of the storage usage…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

Elfstone

Microsoft's own "Authenticator" app now supports enrolling it as a "passkey" that can be used to authenticate to Microsoft Azure joined Windows 10/11 PC's, sending push notifications to grab the user's attention to their phone app, but instead of revealing…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Authenticator Export with Centralized Storage Option

DennisM1

I am writing to request an enhancement to the NetIQ application that offers users a more secure and convenient option for transferring their authenticators between smartphones by implementing a centralized storage option for authenticator backups. In…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Authenticator Export for Seamless Smartphone Transition

DennisM1

I am writing to request a new feature that would enhance the user experience and streamline the transition between smartphones for users of the NetIQ application. Specifically, I propose the implementation of an authenticator export function similar to…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
implement rate-limiting on the push notification to overcome the attack of overwhelming push notifications with Smartphone method

kgast

With a compromised user account (password) it would be possible to start a push notification bombing attack with the goal that the user will finally run an "Accept" within the smartphone app giving full access to the user account. Mitigating this kind…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA APP could be receive QR Code by any AA Version

wencheng

AA Team release a Android APP　（3.2.2 version 565）, it update all user mobile phone by auto / manual update. But this version seem could not support QR Code by old AA Server. this issue cause customer user much complain. When dev Team want to release…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Make advanced smartphone method settings easy to understand

Mtrix GmbH

Is it possible to add a warninig notice for "Default Vendor" on advanced settings of smartphone method that these parameters should be changed only in case of customer develop own applicatrion with SDK. This parameter can confuse, because customer might…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Extend "Lockout options" police to PushNotification

Amilton S Filho

The case of Uber could be prevent in our AAF if we could extend the Lockout option to PushNotification as well. Not just the OTP/Password. Considering that we don't have a default police on Risk Services for that.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
OSP Text Changes for Smartphone Method

DennisR1

When using the Smartphone method to authentication against the OSP, at one point the label says "Waiting for smartphone data...". This text is not very helpful to users who are not very technical . Blue collar workers for example are confused by the phrase…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
NETIQ phone app token export / backup

Jack John

why the app still do not support token backup or export feature? when user switching phone, they always need to find support to regen the token at the server. This is dumb and increasing administrator workload.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

Felicity Chapman

As a security concern, we would like the option to remove the "cancel" button on the second factor prompt on OAuth integrations for Fingerprint, Smartphone push, TOTP, and SMS OTP methods.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
OSP URL Whitelist

DennisR1

We need to the ability to allow the OSP to authenticate users coming from more than just the URL set in the Web Authentication Policy. For example, we have four smartphone URLs for our various sites which are geographically based. The Smartphone enrollment…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Make NetIQ Auth App Available in Huawei AppGallery

fteo1

We have a lot of Huawei Smartphone users request to make NetIQ Auth App available in Huawei AppGallery.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Display Information About Enrolled Device

Matt Weisberg

When enrolling a device (phone, tablet, etc.) the system should gather information on what that device is (e.g. iPhone, Android) and display that information to the user in the enrollment portal and/or when authenticating. This would be especially helpful…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow Initial Installation and Opening NetIQ Auth App w/o Requiring Setting of PIN

Matt Weisberg

When you first install the NetIQ Auth App, it requires the user to immediately setup a PIN. User should not be required to setup a PIN initially unless required to do by the method configuration. If the server configuration does not require a PIN, this…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow customization of Smartphone Enrollment Link Page

Matt Weisberg

When going to smartphone/enroll, the end-user is presented with this on their phone: That page is very basic and amateurish. We neee the ability to customize that page, at least allow changing the link texts and/or switch them to graphical buttons…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
When accessing the smartphone/enroll link on Android, make it prompt to open NetIQ Auth app (like on iOS)

Matt Weisberg

On iOS, when you go to smartphone/enroll, if NetIQ Auth is already installed, you get prompted to open the app, as in here: But on Android, you do not, you just get this: And the user must select "Click to enroll". The Android experience…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Provide an alternative way to obtain the "NetIQ Advanced Authentication" Android app, other than Google Play Store

lbert

The NetIQ Advance Authentication android app for the Smartphone authentication method is available only on the Google Play Store, but there are many android users with no access to Google Play Store, such as: users in China (1.4 billion) and some…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas

Menu

OpenText NetIQ Advanced Authentication

Fixes for possible Vulnerabilities in the NetIQ Authenticator App

Netiq Authenticator add possibility to disable overlay apps and hide information in overview screen

Add AWS SNS support for SMS OTP.

Our company requires certain cipher suites be removed from AA per PCI requirements.

NetIQ Authentication App

Removing the save button for the smartphone push enrollment for users that are already enrolled for Smartphone push

Smartphone push messages for Awareness Training

Reduce storage usage NetIQ authenticator App iOs

Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

Authenticator Export with Centralized Storage Option

Authenticator Export for Seamless Smartphone Transition

implement rate-limiting on the push notification to overcome the attack of overwhelming push notifications with Smartphone method

AA APP could be receive QR Code by any AA Version

Make advanced smartphone method settings easy to understand

Extend "Lockout options" police to PushNotification

OSP Text Changes for Smartphone Method

NETIQ phone app token export / backup

Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

OSP URL Whitelist

Make NetIQ Auth App Available in Huawei AppGallery

Display Information About Enrolled Device

Allow Initial Installation and Opening NetIQ Auth App w/o Requiring Setting of PIN

Allow customization of Smartphone Enrollment Link Page

When accessing the smartphone/enroll link on Android, make it prompt to open NetIQ Auth app (like on iOS)

Provide an alternative way to obtain the "NetIQ Advanced Authentication" Android app, other than Google Play Store

Resources

Menu

Popular Tags

Resources