OpenText NetIQ Access Manager Community

Access Gateway Auditing needs to be more granular and be able to send events at Reverse Proxy level

Marcus Gould

As it stands, Access Manager Access Gateway can only send audit events for a specific gateway, not an individual Reverse Proxy; e.g. Oct 28 17:50:07 black Black_AC "Novell Access Manager","timeStamp":"Mon, 28 Oct 2024 17:50:07 +0000","eventId":"002E0601…
- 2 months ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Add option to let NAM interpret custom NameID format values in SAML2 AuthnResponses as "transient"

Thomas Reibenwein

Some SAML2 federation partners (acting as IDP for NAM) are using custom NameID Format values like <saml:NameID Format="acns:alfaid" NameQualifier="XYZ">ACCOUNTID</saml:NameID> NAM IDP interprets all NameID except "transient" as "persistent", including…
- 4 months ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
More flexibility regarding the optional parameters sent in an authorization request when using the OAuth integration.

Alex McHugh

SSPR has a feature that allows an admin to use the macro syntax and send extra info as part of an auth redirect to a configured OAUTH2/OIDC integration. This is referred as a login_hint and is an optional part of the OIDC core spec that is intended…
- 5 months ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Expose all logs shown on the Auditing & Logging via the REST API

Jason Womack

Many security products are shifting from (r)syslog to API-based ingest of logging data. I would greatly appreciate seeing this support added to NAM. My primary example is authentication/failed authentication logs. Thank you, Jason
- 6 months ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Add support for External authentication provider integration with Entra ID

kgast

External authentication provider integration with Entra ID. This integration allows users to log in to applications and services using credentials from external systems such as Google, Facebook, or other enterprise identity providers. Several Providers…
- 6 months ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Kerberos Identity Injection on reverse proxies

RamonLustrati

Apparently the Kerberos Identity Injection no longer works, as changes have been made on the Microsoft side. Unfortunately, this information has not been corrected in the documentation. More importantly, Identity Injection should support Kerberos. I have…
- 7 months ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Token Exchange/On Behalf Of OAuth 2.0 grant to be supported in NAM

Jerome Yumul

We have use case where we need the Token Exchange OAuth2.0 flow ( https://datatracker.ietf.org/doc/html/rfc8693 ) Other IDP such us Okta & Microsoft provides support for this flow. Would be great if MF will provide support for this as well. https…
- 11 months ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Access Manager should support RADIUS from external MFA solutions.

Amilton S Filho

During integration of Azure MFA and NAM, the integration failed and we detected it is from NAM side. Was installed 3 other free radius servers and did the integration and it worked perfectly. Knowing that we have integrated Azure MFA using same way (RADIUS…
- over 1 year ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Competitive Requirement: FIDO2 "Passkeys" are the new secure website "passwords" that NSL needs to generate and store

Elfstone

In order to stay market-relevant and encourage new/existing customers such as us to stick with SecureLogin, support should be added to both generate and store FIDO2 Passkeys. With recent support by Microsoft, Apple and Google to bake full FIDO2 support…
- over 1 year ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
SSPR Forgotten Password module should be able to look for an unlock intruder lockout across multiple LDAP sources

Elfstone

Like many larger enterprises, our company has both eDirectory and Active Directory. Employee accounts exist in both with the same CN. When Intruder lockout occurs for a variety of reasons, it might happen just within their eDir account, just their AD…
- over 1 year ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Access Manager ReST API interfaces for certificate

László Tumpech

Current ReST API has one interface for renewing the Administration Console certificates. It doesn't have: An interface for creating new certificates. An interface that lists all certificates. An interface for getting any information about the…
- over 1 year ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
certificate management and deploy

MPratesi

the customer would like a web application that allows you to request the generation of a personal by the user and once issued the display of a QRCode that allows installing the certificate on a mobile device and a link to use for installation of the same…
- over 1 year ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
SSPR Forgotten Password OAuth integration with third party MFA

jlrodriguez

Actually SSPR can have forgotten password working with NetIQ Advanced Autnentication. OAuth should work with any other third party MFA that provides this integration. Regards José Luis
- over 1 year ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
SSPR Should be able to communicate with local HaveIBeenPwned servers

Sebastian Novak

Hi! Since SSPR only supports external breach database it is hard to enable this option for quite a good amount of users. Companies do not always want to send their users credentials to external REST APIs even if they are encrypted. I suggest an option…
- over 1 year ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Enhancement request to provide the remaining session timeout

Kishore Pinakana

1. To implement REST API to get remaining time out and validity of a user session (Existing REST API to get some user session info does not include anything related timeout) 2. additional idea to get pop up in the user browser to alert the user session…
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Ability to specify contract time out that is not multiple of five

Kishore Pinakana

We Need to ability to time out exactly 15 mins Current timing out 15-2 = 13 mins (current algorithm or by design is - 2 mins) Impact: Due to mandatory security compliance we have to reduce time out to 15 mins and users required full 15 mins in place…
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Can Access Manager integrate with another MFA application (not AA)

sherry

Can Access Manager integrate with another MFA application (not AA) for
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Add risk-based integration with ArcSight Intelligence

icseke2

Currently UEBA is only supported on S3 based Interset. The ability to integrate NAM with on-premise ArcSight Intelligence would facilitate a more robust SIEM integration for customers who are not able/willing to use SaaS products.
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Command-line interface (CLI) as is a text-based user interface (UI)

Amilton S Filho

We have the possibility of Consumption of APIs, but we don't have a way to do it via the command line, like a CLI.
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Make CIBA easy

Amilton S Filho

Provide in a easy way Client-Initiated Backchannel Authentication (CIBA) capability.
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Flow-based configuration with drag-and-drop

Amilton S Filho

Our configuration screens and menus are considered not intuitive, complicated and complex. Studio Connector tries to do things in the format of tutorial and procedures, but still, the competition puts the issue of usability for administration as a basic…
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Support passwordless authentication with NAM

MKhater

Support paswordless authentication with NAM using web authentication methods or integration with Windows Hello. By passwordless authentication, we mean modern paswodless like FIDO, Windows hello, SMS OTP, Or any other method and not kerberos or certificate…
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Add user identification / authentication against configured userstore with OAuth Client Credential flow allowing LDAP attributes within claims

kgast

With the current NAM OAuth implementation it is not possible to use user attribute ( like LDAP group membership) within scopes / claims. Only "static" custom claims within a scope can be configured. Other vendors offer this kind of functionality.
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Add rfc8628 OAuth 2.0 Device Authorization Grant support

kgast

As per RFC The OAuth 2.0 device authorization grant is designed for Internet- connected devices that either lack a browser to perform a user-agent- based authorization or are input constrained to the extent that requiring the user to input text in…
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas
Monitoring for Oauth/OpenID connections in NAM

Arie-jan Oudshoorn

When adding a new oauth/openid client monitoring the connection is rather limited because not everything is shown in the browser or logs. Especially if the client or server is from a different company.
- over 2 years ago
- OpenText NetIQ Access Manager
- Access Manager Ideas

Menu

OpenText NetIQ Access Manager

Access Gateway Auditing needs to be more granular and be able to send events at Reverse Proxy level

Add option to let NAM interpret custom NameID format values in SAML2 AuthnResponses as "transient"

More flexibility regarding the optional parameters sent in an authorization request when using the OAuth integration.

Expose all logs shown on the Auditing & Logging via the REST API

Add support for External authentication provider integration with Entra ID

Kerberos Identity Injection on reverse proxies

Token Exchange/On Behalf Of OAuth 2.0 grant to be supported in NAM

Access Manager should support RADIUS from external MFA solutions.

Competitive Requirement: FIDO2 "Passkeys" are the new secure website "passwords" that NSL needs to generate and store

SSPR Forgotten Password module should be able to look for an unlock intruder lockout across multiple LDAP sources

Access Manager ReST API interfaces for certificate

certificate management and deploy

SSPR Forgotten Password OAuth integration with third party MFA

SSPR Should be able to communicate with local HaveIBeenPwned servers

Enhancement request to provide the remaining session timeout

Ability to specify contract time out that is not multiple of five

Can Access Manager integrate with another MFA application (not AA)

Add risk-based integration with ArcSight Intelligence

Command-line interface (CLI) as is a text-based user interface (UI)

Make CIBA easy

Flow-based configuration with drag-and-drop

Support passwordless authentication with NAM

Add user identification / authentication against configured userstore with OAuth Client Credential flow allowing LDAP attributes within claims

Add rfc8628 OAuth 2.0 Device Authorization Grant support

Monitoring for Oauth/OpenID connections in NAM

Resources