• Erratic behaviour with repository

    We are experiencing an issue with user access to a repository that is behaving erratically . This repository has been functioning correctly until now. Other systems are accessing and querying the LDAP without any issues, but from our deployment, we…
  • OES Login with Third-Party Credential Provider: OFF - Device Service Bug?

    We have a specific set of settings for Notebooks as our OES servers aren't availible outside of our network so if a user logs in on a notebook, AAF won't also login with OES automatically... In such a case users are supposed to login with our VPN (so…
  • Integrating Advanced Authentication with NetIQ Access Manager Contract

    I am just getting started with trying to create a multi-factor authentication solution between Advanced Authentication and Access Manager, and I'm kind of coming in blind, since I am not very familiar with these two products; another department manages…
  • Remove OTP from Desktop OTP Tool

    Hello, We used the Link enrollment option to auto-enroll an OTP authenticator within Desktop OTP Tool. It worked fine, but after we removed the OTP method from the Authenticators Management page, we were unable to remove the enrolled OTP in the Desktop…
  • SSO to AA with NAM

    Hi, Since with version 6.4.2 we no longer have the old GUI and we can only use the new GUI for the Enrollment portal, and it no longer supports basic authentication, does anyone know how we can implement SSO with NAM and AA? Using OAuth? having AA…
  • Determine domain join workstation status

    Using latest AA version 6.4.2, is it possible to determine if workstation where the request is coming from is domain joined and act accordingly ?
  • Deprecated Bluetooth Method (Advanced Authentication 6.4 SP1): permanent or temporary?

    Hi, In NetIQ Advanced Authentication 6.4 Service Pack 1, the Bluetooth Method has been deprecated. I understand there are security issues with that, but we have waited with updating it, since a lot of our 4000 users use the Bluetooth method. Is this…
  • MFA Radius for Admin on Switches etc

    Hi All, Hoping someone can help as I'm stuck trying to get MFA Radius auth to work for Admin access on switches etc. AAuth 6.4.1 I'm trying to use Radius with MFA for Admin access to switches etc. Can't get the rules/chains, just getting auth-reject…
  • Installing Advanced Authentication via USB

    Hi Guys, Is it possible to install Advanced Authentication via USB? Like booting the iso image from the usb? TIA
  • access message logging

    Hello, I'm everyone. new to NetIq, and I have a use case. I am using the MFA via sms and email. I need to know if a client has any access problem, is there a log where I can see this? in which path is it written? And what is the message that I should…
  • Any case of Citrix VDI?

    A customer is questioning if we had any case of VDI/VDA using our AAF?
  • AA and GroupWise

    (Not sure if this is the right place for the question, or better in the GroupWise section?) We are currently evaluating Advances Authentication. I have installed a single AA appliance, no cluster, no multi tenancy. For testing I have configured three…
  • MacOS Client : Disable Local User Login

    Hi All, Does the latest AA 6.3 is able to restrict MacOS User Login using AA MacOS Client, meaning once MacOS Client is installed, user can only authenticate to AA and map to Local User and gain access to MacOS Desktop. Current User is able to see…
  • No available authentication chain was found.

    Hi all, I have recently inherited an AA system and am running into an issue when users in a specific OU attempt to sign in to add an authentication method. Users are automatically enrolled with the 'email me a code' method upon account creation…
  • Steps for Smartphone Enrollment for Android

    Hello MF Community, I've been trying to enroll a Smartphone Method using an Android phone. Here's my error: "java.security.cert.CertPathValidatorException: Trust anchor for certification path not found". Already checked similar questions posted here and…
  • Does NetIQ Authenticator provide a means of transferring credentials to a new device like Google Authenticator does?

    When a customer has opted to use NetIQ Authenticator for third party applications in addition to AA this would be very convenient.
  • Is it possible to use mini USB Fingerprint device for AAF windows login Fingerprint method?

    Hi, We have a requirement from customer, to use Mini USB Fingerprint device for AAF windows login Fingerprint method. As per AAF documentation only USB based Fingerprint devices are supported by AAF. Can anyone suggest best compatible supported…
  • NAAF RADIUS Server compatible with Fortinet-Group-Name feature

    Hi all, I'm configuring the multifactor authentication between Advanced Authentication and Fortinet Appliance. All tested methods worked fine, but we want to enable the Fortinet-Group-Name feature described here: https://kb.fortinet.com/kb/documentLink…