OpenText NetIQ Advanced Authentication Community

NetIQ Login to windows should also trigger ZENworks Pre-Login Policies (Just like OES Client)

Daniel Gregor Egelseer

I think the title says pretty much everything... Currently if you use OES (also with "Advanced Authentication" enabled) as the primary credential provider it will also trigger the ZENworks Pre-Login Policies (Like the Dynamic Local User Policy for example…
- 1 month ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Debian 11 and 12 support

JSINFO

MFA Advanced Authentication 6.4.x - Debian 11 and 12 support for PAM Linux Client, is this functionality on the roadmap for this or a future version?
- 2 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Locale Cache Timer App

ChristophG

"It could be useful for some users to have a local cache timer (if the 'Cache options' policy is activated and set to xxx), where the user can see when the local cache expires."
- 4 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Support MS Entra External Authentication Method feature

Mtrix GmbH

Some time ago Microsoft released new feature "External authentication methods in Microsoft Entra ID": https://techcommunity.microsoft.com/t5/microsoft-entra-blog/public-preview-external-authentication-methods-in-microsoft/ba-p/4078808 This feature using…
- 5 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Add AWS SNS support for SMS OTP.

dbenjamin

On the /admin/policies/SMSSender page, add AWS SMS as a dropdown option. Pick any SDK from here: https://docs.aws.amazon.com/sns/latest/dg/sms_publish-to-phone.html#sms_publish_sdk Build new configuration screen to include AWS required attributes…
- 8 months ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
rebuilding the SMS sender configuration

Szymon Lewandowski

Hello, I would like to suggest changing the SMS sending configuration page in your NetIQ AA software (Policies -> SMS sender -> Sender service - General). I can't set up an SMS gateway with our service provider, T-Mobile. You require providing a username…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
TACACS support

PetroF

Hello Team, We would highly appreciate TACACS integration support in addition to the existing RADIUS support. As many network our devices are configured using TACACS protocol. Having TACACS supportted into your product would greatly benefit our organization…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

Elfstone

Microsoft's own "Authenticator" app now supports enrolling it as a "passkey" that can be used to authenticate to Microsoft Azure joined Windows 10/11 PC's, sending push notifications to grab the user's attention to their phone app, but instead of revealing…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
FIDO2 support to login to MacOS

Elfstone

Advanced Authentication as of AA 6.3.6 has supported logging into the Windows OS itself via FIDO2 for nearly 2 years. This even predates Microsoft's own efforts to add native Windows OS logon support for FIDO2 which has only recently arrived. FIDO2…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Chains to identify users

Beatriz Domínguez Callero

Now, AA uses the default repository list configured in"policies>login options" to identify users. When a user attempts to access to an event, AA checks if the user exitst in this list, in order. AA don´t check if the event has chains for that repository…
- over 1 year ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow setting any repo attribute to unspecified NamedID in AA saml events

bmrussell

Currently in AA you are only allowed to make the following attributes the NameID: E-mail SAMAccount CN ImmutableID Unspecified format can be used and any value can be used that is present in an AA repo. This would allow much more flexibility…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA support for Microsoft HoloLens

Elfstone

Micro Focus Advanced Authentication is currently shutting itself out the growing market of Microsoft HoloLens, and thereby putting themselves at risk of being abandoned by prospective and existing customers such as us who need an MFA solution that can…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

Felicity Chapman

As a security concern, we would like the option to remove the "cancel" button on the second factor prompt on OAuth integrations for Fingerprint, Smartphone push, TOTP, and SMS OTP methods.
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AAF should support Microsoft Azure Conditional Access Custom Controls

KevinS

Dear AAF-Team, it would be great if you could support Microsoft Azure Conditional Access Custom Controls. This allows AAF to be used as a Multi-Factor-Authentication (via Oauth2/Open ID Connect) against the Microsoft 365 Portals without changing…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Option to strip AA's "REPO\" prefix when handing username down Linux PAM stack to other modules

Elfstone

AA Linux PAM Client should have an option to leave out its internal "REPO\" prefix when handing a username down the PAM stack to other auth/account/session/password modules. Today, when we use AA’s “pam_aucore.so” to authenticate users, once the user…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
PAM Client support for IBM AIX

Elfstone

AIX is IBM's enterprise class UNIX distribution. IBM AIX, versions 7.2 and 7.3 are the primary versions to target for support. The PAM Client should at a minimum be functional for SSH, for both domain mode and non-domain mode, and for AIX servers that…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Allow AA authentication for SSH on Linux servers not joined to an AD domain

Elfstone

AA today doesn't officially support PAM-integration to SSH authentication using AA on Linux servers that aren't joined to an AD domain: https://www.netiq.com/documentation/advanced-authentication-63/linux-pam-client/data/scrng_ssh.html There are a…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
allow the change of the osp keys to a third party signed cert

bmrussell

Make it so customers can upload a third party signed certificate for osp to use instead of the default untrusted certs. Some saml providers require a third party signed certificate for saml to function properly. You could bake uploading the cert for…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Zenworks Credential Store

RaveNet

AAuth should be able to plugin to the zenworks credential store
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Windows Client Zenworks DLU

RRLAG

Add support for the Zenworks Agent to leverage Dynamic Local User policies to create user accounts on non-domain joined machines. Additionally allow the ability to auto-map AA accounts to local accounts without needing to unnecessarily prompt the user…
- over 2 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA to support multiple radius server when AA acting as client.

Vishal Gupta

Can AA product be enhanced to support more than one radius server when AA is configured to act as a client. https://www.netiq.com/documentation/advanced-authentication-63/server-administrator-guide/data/radius_client.html Currently product upto…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA Device Service support for Windows 10 IoT kiosks

Elfstone

Micro Focus Advanced Authentication is currently shutting itself out the growing market of Windows 10 IoT kiosks, and thereby putting themselves at risk of being abandoned by prospective and existing customers such as us who need an MFA solution that…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
AA OSP (SAML/OAuth) should allow external Signing/Encryption certs

Elfstone

We've been unable to integrate AA OSP (SAML/OAuth) with certain major IT systems (Palo Alto, for one) inside our company specifically because AA's OSP forces you to use self-signed SAML/OAuth Signing certificates. It's not that its a problem that AA is…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
Registering TOTP method via Google Authenticator should not result in generic "Netiq(Netiq)" as profile name

Elfstone

Within the AA Enrollment Portal (even as recent as 6.3.5.2), if you scan the QR code for TOTP method using Google Authenticator (which is officially supported by AA), this results in a Google Authenticator profile named "Netiq(Netiq)" This is bad for…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas
When accessing the smartphone/enroll link on Android, make it prompt to open NetIQ Auth app (like on iOS)

Matt Weisberg

On iOS, when you go to smartphone/enroll, if NetIQ Auth is already installed, you get prompted to open the app, as in here: But on Android, you do not, you just get this: And the user must select "Click to enroll". The Android experience…
- over 3 years ago
- OpenText NetIQ Advanced Authentication
- Advanced Authentication Ideas

Menu

OpenText NetIQ Advanced Authentication

NetIQ Login to windows should also trigger ZENworks Pre-Login Policies (Just like OES Client)

Debian 11 and 12 support

Locale Cache Timer App

Support MS Entra External Authentication Method feature

Add AWS SNS support for SMS OTP.

rebuilding the SMS sender configuration

TACACS support

Competitive Requirement: NetIQ Auth aka Smartphone support to enroll as FIDO2 key via Bluetooth & NFC

FIDO2 support to login to MacOS

Chains to identify users

Allow setting any repo attribute to unspecified NamedID in AA saml events

AA support for Microsoft HoloLens

Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

AAF should support Microsoft Azure Conditional Access Custom Controls

Option to strip AA's "REPO\" prefix when handing username down Linux PAM stack to other modules

PAM Client support for IBM AIX

Allow AA authentication for SSH on Linux servers not joined to an AD domain

allow the change of the osp keys to a third party signed cert

Zenworks Credential Store

Windows Client Zenworks DLU

AA to support multiple radius server when AA acting as client.

AA Device Service support for Windows 10 IoT kiosks

AA OSP (SAML/OAuth) should allow external Signing/Encryption certs

Registering TOTP method via Google Authenticator should not result in generic "Netiq(Netiq)" as profile name

When accessing the smartphone/enroll link on Android, make it prompt to open NetIQ Auth app (like on iOS)

Resources

Menu

Popular Tags

Resources