OpenText NetIQ Advanced Authentication Community

APM application allows a low-privileged user to gain access to information

Stephen Hulme

Finding We identified that the APM application allows a low-privileged user to gain access to information related to deployed applications through the application monitor section and retrieve technical information via a custom report module, which is…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Improve user traceability in logs

Antonio Castillo Rodríguez

- We request that the WebAuth logs include a unique oauth session identifier and include the uid and the event to be able to trace the user ○ In 6.4.1 an auth tracking identifier is included that allows the oAuth session to be identified at all times…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Require authenticators from the same user for MFA for linked authenticators and not from different users

MathiasS

Hello, we are using the "linked authenticators" feature in AAF to make multiple users use one single shared Active Directory account. So we are linking the authenticators of the users with the shared account. A multi factor authentication is required…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Windows Client Zenworks DLU

RRLAG

Add support for the Zenworks Agent to leverage Dynamic Local User policies to create user accounts on non-domain joined machines. Additionally allow the ability to auto-map AA accounts to local accounts without needing to unnecessarily prompt the user…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Helpdesk role - Separate Enrolment and Unenrolment functions

Bruno Ubisse

In a scenario where user populations require more separation between their roles, the current helpdesk user configuration has less flexibility and prevents us from addressing this requirement . We have the need to allow different helpdesk user populations…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Registering TOTP method via Google Authenticator should not result in generic "Netiq(Netiq)" as profile name

Elfstone

Within the AA Enrollment Portal (even as recent as 6.3.5.2), if you scan the QR code for TOTP method using Google Authenticator (which is officially supported by AA), this results in a Google Authenticator profile named "Netiq(Netiq)" This is bad for…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AAF User Consent Management

Bruno Ubisse

With the enforcement of different data and privacy rules, the is a growing requirement to address the Consent of users, more specifically for the collection of their biometric data. This requirement asks that AAF should have means to manage and report…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Ability to define LDAP Search Filters on AA LDAP Repos

Elfstone

Today in AA you can only define an LDAP "Base DN" To better support complex LDAP hierarchies and the diverse sorts of user communities under them them (service accounts, employees likely spread across multiple geographic OU's, customers, suppliers,…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow for SAML2 SP NameID Customization

TG920

Right now (as 6.3.4.1) the only option to send as the nameID for an SAML2 SP event are the following: sAMAccountName UID Email Address Persistent/Transient (Unsure which one as it's not labeled if nothing is selected) I feel like this is…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA VDA Enroll temporary card as emergency card instead of emergency password

Michiel Pouw

The Advanced Authentication VDA Client already solves a lot of health care use cases, but there is room for improvement This should also be an option without VDA, but with this feature available in Advanced Authentication, supporting this also in VDA…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA VDA Change (ldap) password / pin support

Michiel Pouw

The Advanced Authentication VDA Client already solves a lot of health care use cases, but there is room for improvement Some of the healt-care users only enroll their card and password (PIN) once at the servicedesk and after this never have to use the…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
User record displays and reporting beyond statistical

Elfstone

Today, Advanced Authentication's reporting is extremely limited, mainly constrained to metrics/statistical events that have somewhat recently occurred in the system. Unlike competitor solutions, AA does not have a good interface to allow administrators…
- over 4 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas

Menu

OpenText NetIQ Advanced Authentication

APM application allows a low-privileged user to gain access to information

Improve user traceability in logs

Require authenticators from the same user for MFA for linked authenticators and not from different users

Windows Client Zenworks DLU

Helpdesk role - Separate Enrolment and Unenrolment functions

Registering TOTP method via Google Authenticator should not result in generic "Netiq(Netiq)" as profile name

AAF User Consent Management

Ability to define LDAP Search Filters on AA LDAP Repos

Allow for SAML2 SP NameID Customization

AA VDA Enroll temporary card as emergency card instead of emergency password

AA VDA Change (ldap) password / pin support

User record displays and reporting beyond statistical

Resources

Menu

Popular Tags

Resources