OpenText NetIQ Advanced Authentication Community

Advanced Authentication Support for Podman on Red Hat Enterprise and SLES

Tom de Haas

I am currently running the latest version of Advanced Authentication (available on docker.io/mfsecurity) on Red Hat Enterprise Linux 8.10 with Podman (4.9.4) for testing purposes, and I’m quite pleased with the results. This setup allows me to use my…
- 9 days ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA to support UEFI boot

Vishal Gupta

While running the Advanced Authentication appliance on VMware ESXi, the Boot Options for the virtual machine need to be configured to the BIOS mode. BIOS mode is no longer available in Gen2 VM and the replacement is UEFI Firmware/Secure boot which is…
- 10 days ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
User Login information for incorrect Email-OTP in Advanced Authentication

Sreejith Pidakkal

If a user enters an incorrect OTP, we are unable to find any records of incorrect OTP details in the Advanced Authentication Logs. The Support Team has identified this as a bug in the product and recommended raising the issue in the idea box. Currently…
- 14 days ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Fixes for possible Vulnerabilities in the NetIQ Authenticator App

Fabian Bruggmann

The vulnerabilities and possible solutions are described below: 1.) Weakness: The local authentication used to approve a login is based on the device lock mechanism (FaceId or fingerprint). However, this mechanism can be bypassed as it is not used to…
- 1 month ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
NetIQ Login to windows should also trigger ZENworks Pre-Login Policies (Just like OES Client)

Daniel Gregor Egelseer

I think the title says pretty much everything... Currently if you use OES (also with "Advanced Authentication" enabled) as the primary credential provider it will also trigger the ZENworks Pre-Login Policies (Like the Dynamic Local User Policy for example…
- 1 month ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
SMS Notification Success/Fail login

Abhinav Shashank

In critical applications , ensuring secure access and maintaining transparency for user activity is paramount. NetIQ Advanced Authentication is a tool that provides multifactor authentication solutions to enhance security. The need for sending notification…
- 1 month ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Netiq Authenticator add possibility to disable overlay apps and hide information in overview screen

Fabian Bruggmann

The authenticator app shows the TOTP in the overview screen of Android when it isn't in focus, which can be a security risk. The authenticator doesn't block app overlays and screenshots, this can also be seen as a security risk. I hope those two features…
- 2 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Improved Hostname Configuration in UI

DennisM1

After updating to version 6.4.3.2, we have received numerous reports that the following error appears in the logs: {"status": "error", "errors": [{"location": "server", "name": "AuError", "msgid": null, "description": "Bad Request"}], "reason": "Domain…
- 2 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Extended CPU Architecture Support

DennisM1

Currently, the client components support only x64, x86, and emulation on macOS. However, an increasing number of mobile devices, including notebooks and MacBooks, are utilizing various CPU architectures that are currently unsupported, specifically: …
- 2 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Integrate Advanced Authenticacion with ACME protocol

Antonio Castillo Rodríguez

Hi, We would like that Advanced Authentication have the possibility integrating with ACME protocol in order to renew SSL certificates from internals PKI automatically. This will make efficient the OM teams labour and will avoid failure point due SSL certificate…
- 2 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support scopes and roles for OpenID Connect

mguldner

We wanted to integrate an application with Advanced Authentication that has the following requirements: Roles: “admin” – Admin rights for the application “user” – Basic user rights for the application This should be included in the “roles…
- 3 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Limit the number of HANIS fingerprint validations a user can attempt

Felicity Chapman

Problem: Users are able to attempt to validate against HANIS an unlimited number of times. Potential Solution: Add a limitation so a user can only attempt a certain number of validations over a certain period of time. For example, a user can only attempt…
- 3 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allowing a choice of which patches to apply on AAF servers via the configuration portal patch channel.

Felicity Chapman

Problem: Currently all the patches available in the patch channel are applied to the AAF servers. It is an all or nothing approach. This can be problematic as patches can be released into the patch channel at any time and this can cause discrepancies…
- 3 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Option to pre-fill the Service Name and Account Name fields for the TOTP method on the New Enrollment Portal

mjg2xw

Option to pre-fill the Service Name and Account Name fields for the TOTP method on the New Enrollment Portal, from a central point (In the policy)
- 3 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Map SAML2 attribute values to AD-group-memberships

Lukas Priwitzer

Dear opentext-team, when using EntraID as an IdP, you can map a group membership to a specfic value of a SAML2 attribute. F.e.: if the user is in the group "LeanIX-Admins", the SAML2 attribute "role" will have the value "admin". See " https://docs…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Card/NFC method supported for Android Tablets

Erik Blick

Dear AAF Team, Today the authentication using the NFC tag works only on the NFC supported Android smartphones. Tablet is not supported in this process. According to OT analysis, there is a problem of using tablets, and that is that Chrome (and other…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
NAA to permit a limited license to coexist with a full license

simeonof

Currently NAM, IDM, etc. customers are entitled also to the limited edition of NAA. Customers however usually have a small number of users that need to use some of the more advanced methods for authentication. So far it became clear (case 02932286) that…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support actionable notification types in iOS App

Norbert Klasen

Actionable notifications let the user respond to a delivered notification without launching the corresponding app. This allows users to quickly respond to MFA push notifications. https://developer.apple.com/documentation/usernotifications/declaring…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
User lockout in both the repository and Advanced Authentication solution after a certain number of failed fingerprint authentication attempts.

Felicity Chapman

Problem: We are running Advanced Authentication version 6.4 and there is no repository lockout when fingerprint authentication fails. The lockout is policy is set but does not apply to fingerprint authentication. Use Case : The lockout policy is set…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Locale Cache Timer App

ChristophG

"It could be useful for some users to have a local cache timer (if the 'Cache options' policy is activated and set to xxx), where the user can see when the local cache expires."
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
HOTP Key

Oliver Kannenberg

Hello, To set up HOTP with the Yubikey, the AAF server needs the Secet Key generated by the Yubikey. Unfortunately, this is no longer state of the art. The personalization tool from Yubico has already been discontinued and the successor Yubico Authenticator…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support for Multi-Factor Authentication on Non-Domain Linux Machines

DennisM1

We came across the following entry in your documentation: "Advanced Authentication does not support multi-factor authentication to a Terminal or SSH for domain users when a Linux machine is used in a non-domain mode." https://www.netiq.com/documentation…
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Enhance the CAF config interface with an option to create a proxy exclude list

kgast

Until now an exclude (no_proxy / NO_PROXY) can only be configured by making use of (yast proxy). Usually wherever a forward proxy can be configured there is also an option to configure an exclude list. This is completely missing here. Note: after using…
- 5 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Advanced Authentication 6.4.3.1 JSON SMS sending

Sebastian Novak

Hi! We wanted to setup new JSON sending of SMS in AA, but have found an issue that is stopping us from implementing. The phone number placeholder is not replaced with actual phone number and is sending an empty string to server. Our JSON parameter…
- 5 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Discussions
Support MS Entra External Authentication Method feature

Mtrix GmbH

Some time ago Microsoft released new feature "External authentication methods in Microsoft Entra ID": https://techcommunity.microsoft.com/t5/microsoft-entra-blog/public-preview-external-authentication-methods-in-microsoft/ba-p/4078808 This feature using…
- 5 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas

Menu

OpenText NetIQ Advanced Authentication

Advanced Authentication Support for Podman on Red Hat Enterprise and SLES

AA to support UEFI boot

User Login information for incorrect Email-OTP in Advanced Authentication

Fixes for possible Vulnerabilities in the NetIQ Authenticator App

NetIQ Login to windows should also trigger ZENworks Pre-Login Policies (Just like OES Client)

SMS Notification Success/Fail login

Netiq Authenticator add possibility to disable overlay apps and hide information in overview screen

Improved Hostname Configuration in UI

Extended CPU Architecture Support

Integrate Advanced Authenticacion with ACME protocol

Support scopes and roles for OpenID Connect

Limit the number of HANIS fingerprint validations a user can attempt

Allowing a choice of which patches to apply on AAF servers via the configuration portal patch channel.

Option to pre-fill the Service Name and Account Name fields for the TOTP method on the New Enrollment Portal

Map SAML2 attribute values to AD-group-memberships

Card/NFC method supported for Android Tablets

NAA to permit a limited license to coexist with a full license

Support actionable notification types in iOS App

User lockout in both the repository and Advanced Authentication solution after a certain number of failed fingerprint authentication attempts.

Locale Cache Timer App

HOTP Key

Support for Multi-Factor Authentication on Non-Domain Linux Machines

Enhance the CAF config interface with an option to create a proxy exclude list

Advanced Authentication 6.4.3.1 JSON SMS sending

Support MS Entra External Authentication Method feature

Resources

Menu

Popular Tags

Resources