We love to hear your ideas for improving Advanced Authentication framework.

 
30 Ideas
of 327
77 Comments
252 Votes
  • Planned

    10

    Determine RADIUS event by client IP address

    In a situation where an environment has multiple RADIUS events, the RADIUS event that is intended to be used by the connecting RADIUS client is determined by the ...

    Comments (3) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    11

    Allow more than one smartphone\PKI card for user

    We want to be able to use more than one smartphone\PKI card authenticators. For example, user has more than one smartphone and he want to be able to authenticate using ...

    Comments (2) | by: Tomer A. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    14

    Periodically export database backup to network location

    Right now you can manually export the database backup and then download it to your local machine. In the future, it is desirable that the database would automatically ...

    Comments (1) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    21

    Ability to use Radius Attributes

    make Radius more configurable in AAF so that attributes can be changed / configured

    Comments (8) | by: Frank S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    4

    Configurable RADIUS auto-enrollment behavior

    Current status: When the RADIUS method is configured with a Radius client, a user is auto-enrolled in the RADIUS method no matter if they have an account in the ...

    Comments (3) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    2

    Thin Client support

    Requested by: Freeman Health, Westpac Description: Productize flash drive solution built by AU team

    Comments (1) | by: Troy D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    5

    Add more than one bluetooth authenticator device

    Customer ask for ability to configure more than one bluetooth device as an authenticator. For example, to use either smart watch or smartphone.

    Comments (0) | by: Yarden B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    5

    Modify Client Login Extension

    We would like to request the client login extension link be shown before chain selection in the Windows agent. Currently it only shows up if the user selects the LDAP ...

    Comments (1) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    7

    Allow Windows Client (and Linux/Mac) to set locale in ...

    We have the need for certain Windows clients to have a specific locale set in the config.properties file. This should override the OS locale.

    Comments (0) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    4

    Increase max email OTP TTL

    Current situation: The max email OTP TTL is set at 360 seconds. Desired situation: We have the need for the email OTP TTL to be set at a higher value. Please allow the ...

    Comments (0) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    8

    Extend Radius server by PEAP support

    Currently Radius server supports only PAP while new (esp. mobile) devices use PEAP. It's the reason customers may not use AA for Radius & mobile device combination and ...

    Comments (1) | by: Dariusz L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    6

    Hide offline OTP option if offline OTP is disabled in Smartphone ...

    Current situation: When offline OTP is disabled for the Smartphone method, the user is still presented the ability to authenticate with the offline OTP at the AAF web ...

    Comments (1) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    3

    A way to delete OATH seed-files more than one per selection.

    A way to delete OATH seed-files more than one per selection. If we would get a checkbox for the selection of the file to be deleted. To delete several Seed-files at once.

    Comments (1) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    12

    Allow the AAF smartphone app to acceptance requests from the locked ...

    Allow the AAF smartphone app to acceptance requests from the locked phone screen

    Comments (2) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    5

    AAF smartphone app should allow you to copy the TOTP enrollments

    AAF smartphone app should allow you to copy the TOTP enrollments

    Comments (1) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    2

    granular rights for authenticator sharing

    Customer needs this option on the one hand for admins, but it could be to much risk if a helpdesk employee can takeover an CxO authenticator provide an extra role to ...

    Comments (1) | by: Peter R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Planned

    3

    Reduce privileges for device service on Windows

    Hello, When device service is installed on Windows, it installs a windows service that runs with local\system account permissions. We want to be able to run it using a ...

    Comments (2) | by: Tomer A. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment
  • Planned

    11

    authenticator sharing

    Allow a shared authenticator to be used regardless of whether or not the the account it is shared with has the same authenticator enrolled or not. For example, if a ...

    Comments (3) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    6

    search field for locked user for the helpdesk portal / ability to ...

    It would be a good to add these two features. 1) Add search field to search for users in the locked users-list 2) If a user will be opened in the help desk (where you can ...

    Comments (1) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    8

    Smartphone Enrollment - Provide ways to seed Username and Description

    When user scans the QR they are prompted to enter username and description. Would like ability to customize where you use: Username: %REPO%\%USERNAME% Description: ...

    Comments (1) | by: Kevin P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration