Labels

AAF
211
ActiveSync
2
Advanced Authentication SaaS
1
Apache Plugin
1
API
9
Authenticator Linking
6
Bitcode ios
1
Cluster Services
4
Configuration
187
Customization options
45
customize OSP login page message
6
Dashboard-Visualization
1
Dashboards-Visualization
36
Device Access
9
Display info on logon page
9
Email
6
Emergency Password Improvement
2
Endpoint ID
2
filter user reports
1
Filters
3
fingerprint
8
Flex OTP
2
Font
1
Idea
97
Installation-Deployment
34
Integrations
100
license
4
Mac
5
MacOS
8
Manage Chains at endpoint
1
Methods
39
new variable
1
Oauth2 Events Redirect URI
5
OTP
16
Outlook
2
Permissions
1
Policies
14
promoting a new GM should not require dns...
1
Readability
2
Reporting & Analysis
8
Reports
10
REST API
6
Roles and Responsibilities
3
SaaS
4
saml attribute
6
Smartphone
29
SMTP
1
SSL
6
SSO
12
Status
3
Supported Platforms
22
timeout
7
Token Lifecycle Management
1
Tokens
5
TOTP
7
UI
22
User Accounts
12
user administration
9
UX
18
Other
98
Top Voted Ideas: Last 30 Days
Lack of Radius function for AA
10
AA Radius for Network(Cisco.HP) Device Support
8
Idea ID: 2874131

Protect accessing to Network Share with MFA.

Mtrix GmbH
Status: New Idea

For now it is possible to bypass AA Windows Client Credentials Provider when accessing Network Share from machine where AA Client installed. 

How to reproduce:

--

1. Make sure that AA Client installed on machine you accessing Netwotk Share from. 

2. e.g. open "This Computer"

3. Input Shared resource path into as address 

4. Press "Enter"

5. Windows Security windows pop ups

6. It is possible to input only username name and password with no MFA

Parents
  •  

    The suggestion is that security groups could be implemented with the Logon filter installed on the Domain Controller. Only authorized accounts should belong to the security group and to become a member of this security group should follow a strict request/approval workflow.

Comment
  •  

    The suggestion is that security groups could be implemented with the Logon filter installed on the Domain Controller. Only authorized accounts should belong to the security group and to become a member of this security group should follow a strict request/approval workflow.

Children

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.