OpenText NetIQ Advanced Authentication Community

OpenText NetIQ Advanced Authentication

APM application allows unauthorized users to gain access via non-expired cookies of a logged out session

Stephen Hulme

Finding We identified that the APM application allows unauthorized users to gain access via non-expired cookies of a logged out session. The application does not revoke the cookies when the user logs out, which means that an attacker can use the cookies…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Improve user traceability in logs

Antonio Castillo Rodríguez

- We request that the WebAuth logs include a unique oauth session identifier and include the uid and the event to be able to trace the user ○ In 6.4.1 an auth tracking identifier is included that allows the oAuth session to be identified at all times…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Make timeout configurable for replica alerts

bmrussell

Some customers keep getting the emails from aaf that give an indication that there is a replication error: Report from CA/m-CA (MASTER). Please check. The server has warning(s) FL | REGISTRATOR | am01.russellinc.net | 2020-03-19 10:04 | The server…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA's OSP aka OAuth webservices lack client session resiliency among cluster members

Elfstone

Client sessions to the Advanced Authentication’s OSP feature that facilitates NAM’s “Generic” aka OAuth method of integration lack resiliency across cluster members. In our case, and likely many other customers, we have two AA Webservers front-ended…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Change Admin Interface Timeout

Matt Weisberg

Add ability to set the timeout on the Administration Interface.
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
NetIQ Auth App application level timeout

eddychiu

An application level timeout setting would be useful to control how long the mobile app shows the one-time-password. The existing control follows the system setting which asks for authentication (PIN or bio-metric) after the smartphone is locked. A…
- over 4 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas

Menu

OpenText NetIQ Advanced Authentication

APM application allows unauthorized users to gain access via non-expired cookies of a logged out session

Improve user traceability in logs

Make timeout configurable for replica alerts

AA's OSP aka OAuth webservices lack client session resiliency among cluster members

Change Admin Interface Timeout

NetIQ Auth App application level timeout

Resources

Menu

OpenText NetIQ Advanced Authentication

Popular Tags

APM application allows unauthorized users to gain access via non-expired cookies of a logged out session

Improve user traceability in logs

Make timeout configurable for replica alerts

AA's OSP aka OAuth webservices lack client session resiliency among cluster members

Change Admin Interface Timeout

NetIQ Auth App application level timeout

Resources