Advanced Authentication Idea Exchange - NetIQ Advanced Authentication

Welcome to NetIQ Advanced Authentication Idea Exchange

This idea exchange is for submitting product enhancement ideas only. If you have a question about the product, please click on the “Discussions” tab above and post your questions there.

2022-08-03

Idea ID: 2873873

Masking SMS OTP tokens that are currently retrievable from the AAF async logs

by Felicity Chapman in NetIQ Advanced Authentication

9 votes

Labels: AAF , OTP

Status: New Idea
- New Idea on 2022-8-3
- 0 Comments
Problem: An administrator on the AAF solution can view and to recover an SMS OTP token upon generation and sending to MSISDN when the debug mode is enabled. Since the debug mode is enabled with a click of a button on the AAF Admin Console logs window...
- Ideas Id :
2022-07-22

Idea ID: 2873792

webauthn Paramters for FIDO2 Method

by DennisR1 in NetIQ Advanced Authentication

6 votes

Labels: AAF , Configuration

Status: New Idea
- New Idea on 2022-7-22
- 1 Comment
It would be beneficial to have the ability to set some optional webauthn parameters. In particular, the UserVerficationRequirement would be configurable to allow for the changing of the default behavior for FIDO2 tokens to require a "device pin" to protect...
- Ideas Id :
2022-07-13

Idea ID: 2873706

APIs to Create RADIUS Events, Clients and Input Rules

by DennisR1 in NetIQ Advanced Authentication

4 votes

Labels: AAF , API , Configuration , Customization options , REST API

Status: New Idea
- New Idea on 2022-7-13
- 0 Comments
We desire the ability to create and manage RADIUS interfaces to Advanced Authentication via the REST API. Currently we cannot create a RADIUS event or RADIUS clients, shared secrets or any RADIUS Input Rules. Please add this functionality to the public...
- Ideas Id :
2022-06-21

Idea ID: 2873565

Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

by Felicity Chapman in NetIQ Advanced Authentication

1 votes

Labels: AAF , fingerprint , OTP , TOTP

Status: New Idea
- New Idea on 2022-6-21
- 0 Comments
As a security concern, we would like the option to remove the "cancel" button on the second factor prompt on OAuth integrations for Fingerprint, Smartphone push, TOTP, and SMS OTP methods.
- Ideas Id :
2022-06-14

Idea ID: 2873521

allow the customer to set there preference for the rpid for the fido2 method

by bmrussell in NetIQ Advanced Authentication

5 votes

Labels: AAF , Idea , Methods

Status: New Idea
- New Idea on 2022-6-14
- 0 Comments
Customers should be give more flexibility to allow the rpid to be set to either the domain name or the host name when the fido2 method is enrolled. So, you can have the fido2 method by default set the rpid to domain name and have the option to change...
- Ideas Id :
2022-06-07

Idea ID: 2873466

Allow more than one device to be registered in smartphone method

by Scott Malugin in NetIQ Advanced Authentication

2 votes

Labels: Methods

Status: New Idea
- New Idea on 2022-6-7
- 0 Comments
Allow more than one device to be registered in smartphone method. Have both my iPhone and iPad registered to approve the auth or use the pin from the either aa app.
- Ideas Id :
2022-06-07

Idea ID: 2873458

64bit version of DeviceSevice component

by Łukasz Olesiejuk in NetIQ Advanced Authentication

3 votes

Labels: AAF , Device Access

Status: New Idea
- New Idea on 2022-6-7
- 0 Comments
DeviceService is now available only in 32bit version. We have 64bit version of DLL for PKI plugin that cannot be loaded because of 32bit version of DS. (support confirmed that) In XXI centaury every app should have x64 version... Best regards...
- Ideas Id :
2022-06-06

Idea ID: 2873449

OSP URL Whitelist

by DennisR1 in NetIQ Advanced Authentication

6 votes

Labels: AAF , Configuration , Customization options , Policies , Smartphone

Status: New Idea
- New Idea on 2022-6-6
- 0 Comments
We need to the ability to allow the OSP to authenticate users coming from more than just the URL set in the Web Authentication Policy. For example, we have four smartphone URLs for our various sites which are geographically based. The Smartphone enrollment...
- Ideas Id :
2022-06-04

Idea ID: 2873446

To support smartphone push OTP (Online OTP) in ADFS Plugin

by fteo1 in NetIQ Advanced Authentication

3 votes

Labels: AAF , Methods

Status: New Idea
- New Idea on 2022-6-4
- 0 Comments
As notice that there is limited authentication method support in ADFS, request to add smartphone push OTP (Online OTP) authentication method in ADFS Plugin
- Ideas Id :
2022-05-20

Idea ID: 2873335

AAF should support Microsoft Azure Conditional Access Custom Controls

by KevinS in NetIQ Advanced Authentication

9 votes

Labels: AAF , Idea , Integrations , SSO

Status: New Idea
- New Idea on 2022-5-20
- 0 Comments
Dear AAF-Team, it would be great if you could support Microsoft Azure Conditional Access Custom Controls. This allows AAF to be used as a Multi-Factor-Authentication (via Oauth2/Open ID Connect) against the Microsoft 365 Portals without changing...
- Ideas Id :
2022-05-12

Idea ID: 2873272

Hide SMS OTPs in the AAF async logs

by Felicity Chapman in NetIQ Advanced Authentication

5 votes

Labels: AAF , OTP

Status: New Idea
- New Idea on 2022-5-12
- 5 Comments
we are able to see the SMS OTP numbers in our async logs. Can we please hide the SMS OTP from the AAF async logs without disabling debug logging?
- Ideas Id :
2022-04-06

Idea ID: 2872968

Option to strip AA's "REPO\" prefix when handing username down Linux PAM stack to other modules

by Elfstone in NetIQ Advanced Authentication

6 votes

Labels: AAF , Configuration , Customization options , Idea , Integrations , Other

Status: New Idea
- New Idea on 2022-4-6
- 0 Comments
AA Linux PAM Client should have an option to leave out its internal "REPO\" prefix when handing a username down the PAM stack to other auth/account/session/password modules. Today, when we use AA’s “pam_aucore.so” to authenticate users, once the user...
- Ideas Id :
2022-04-06

Idea ID: 2872967

PAM Client support for IBM AIX

by Elfstone in NetIQ Advanced Authentication

4 votes

Labels: AAF , Idea , Installation-Deployment , Integrations , Other , Supported Platforms

Status: New Idea
- New Idea on 2022-4-6
- 0 Comments
AIX is IBM's enterprise class UNIX distribution. IBM AIX, versions 7.2 and 7.3 are the primary versions to target for support. The PAM Client should at a minimum be functional for SSH, for both domain mode and non-domain mode, and for AIX servers that...
- Ideas Id :
2022-04-06

Idea ID: 2872966

Allow AA authentication for SSH on Linux servers not joined to an AD domain

by Elfstone in NetIQ Advanced Authentication

6 votes

Labels: AAF , Idea , Installation-Deployment , Integrations , Other

Status: New Idea
- New Idea on 2022-4-6
- 0 Comments
AA today doesn't officially support PAM-integration to SSH authentication using AA on Linux servers that aren't joined to an AD domain: https://www.netiq.com/documentation/advanced-authentication-63/linux-pam-client/data/scrng_ssh.html There are...
- Ideas Id :
2022-03-29

Idea ID: 2872887

create a way to report two things 1. A list of enrolled users and methods 2. A list of users that are taking up a license

by bmrussell in NetIQ Advanced Authentication

5 votes

Labels: AAF , Idea , Reporting & Analysis

Status: New Idea
- New Idea on 2022-3-29
- 0 Comments
create a way to report two things 1. A list of all enrolled users and methods 2. A list of all users that are taking up a license Currently you are only able to do this for the last 30 days which does not give you a comprehensive list.
- Ideas Id :
2022-03-29

Idea ID: 2872886

allow the change of the osp keys to a third party signed cert

by bmrussell in NetIQ Advanced Authentication

6 votes

Labels: AAF , Idea , Integrations

Status: New Idea
- New Idea on 2022-3-29
- 0 Comments
Make it so customers can upload a third party signed certificate for osp to use instead of the default untrusted certs. Some saml providers require a third party signed certificate for saml to function properly. You could bake uploading the cert for...
- Ideas Id :
2022-03-14

Idea ID: 2872755

Enable or disable "autocomplete" on input fields via method configuration option

by Wouter Rusman in NetIQ Advanced Authentication

2 votes

Labels: AAF , Configuration , Customization options , OTP

Status: New Idea
- New Idea on 2022-3-14
- 0 Comments
Many modern browsers support autocomplete on input fields : https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete Please make the ability to turn this option on or off available in the method configuration or show some documentation...
- Ideas Id :
2022-03-01

Idea ID: 2872641

Add support for Card Reader Elatec RFID TWN4

by Sweetleif in NetIQ Advanced Authentication

1 votes

Labels: AAF

Status: New Idea
- New Idea on 2022-3-1
- 0 Comments
For Card authentication.
- Ideas Id :
2022-02-26

Idea ID: 2872626

specify local account in config.properties to allow local login

by eddychiu in NetIQ Advanced Authentication

3 votes

Labels: AAF , Configuration , Idea

Status: New Idea
- New Idea on 2022-2-26
- 0 Comments
While the option disable_local_accounts: true is in place in config.properties, I suggest having an option to specify some local accounts to allow local login. This is essential when there are some issues denying MFA to work.
- Ideas Id :
2022-02-25

Idea ID: 2872614

AAF - Change Site Names

by StephCT in NetIQ Advanced Authentication

3 votes

Labels: AAF , Configuration

Status: New Idea
- New Idea on 2022-2-25
- 0 Comments
When the sites are created, they cannot be renamed. The only way, if it's really necessary, is to disrupt the clusters and recreate them again. There should be an option to just rename the Site names of the clusters
- Ideas Id :

Menu

NetIQ Advanced Authentication

Idea Exchange Quick Links

Labels

Welcome to NetIQ Advanced Authentication Idea Exchange

Masking SMS OTP tokens that are currently retrievable from the AAF async logs

webauthn Paramters for FIDO2 Method

APIs to Create RADIUS Events, Clients and Input Rules

Advanced Authentication NAM Integration: An option to remove the "cancel" button from second factor methods

allow the customer to set there preference for the rpid for the fido2 method

Allow more than one device to be registered in smartphone method

64bit version of DeviceSevice component

OSP URL Whitelist

To support smartphone push OTP (Online OTP) in ADFS Plugin

AAF should support Microsoft Azure Conditional Access Custom Controls

Hide SMS OTPs in the AAF async logs

Option to strip AA's "REPO\" prefix when handing username down Linux PAM stack to other modules

PAM Client support for IBM AIX

Allow AA authentication for SSH on Linux servers not joined to an AD domain

create a way to report two things 1. A list of enrolled users and methods 2. A list of users that are taking up a license

allow the change of the osp keys to a third party signed cert

Enable or disable "autocomplete" on input fields via method configuration option

Add support for Card Reader Elatec RFID TWN4

specify local account in config.properties to allow local login

AAF - Change Site Names

Resources