We love to hear your ideas for improving Advanced Authentication framework.

 
327 Ideas
428 Comments
1,553 Votes
  • Planned

    12

    Allow the AAF smartphone app to acceptance requests from the locked ...

    Allow the AAF smartphone app to acceptance requests from the locked phone screen

    Comments (2) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    11

    Better Health Check

    We desire the ability for web servers to have their health checked regularly to see if they can process authentication attempts. If not, the web server should be disabled ...

    Comments (1) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    11

    authenticator sharing

    Allow a shared authenticator to be used regardless of whether or not the the account it is shared with has the same authenticator enrolled or not. For example, if a ...

    Comments (3) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    10

    Audit logging of actions by Enroll Admins in the Helpdesk console

    All actions of Enroll Admins within the Helpdesk console should be logged -- information should include at least which authenticator for which user by a particular Enroll ...

    Comments (3) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    10

    SMS-OTP Authenticator allows letters and special characters in the ...

    Currently, users can also enter letters and special characters in the phone number input field. This of course leads to the fact that the telephone numbers cannot be ...

    Comments (1) | by: Hilmi Koray T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    9

    Windows local user password change using Forgotten Password ...

    Using forgotten password service ( over forgotten password link) with AAF Client version allows change password for Cached and Network password only in the first ...

    Comments (0) | by: Aleksejs P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    9

    RISK Engine only show single chain based on RISK level

    Currently with RISK if a user is "LOW" RISK they see 3 Chains to select. Would like to have ability to only show the single chain based on RISK. When the user is LOW ...

    Comments (4) | by: Kevin P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    9

    Login screens should, per-computer + per-user, remember last Chain ...

    Windows/Mac/Linux Client login screens should, per-computer and per-user remember the last Chain successfully used to login/unlock that device by that user, highlighting ...

    Comments (1) | by: Stefan E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    8

    IPv6 support

    We are running in a dual stack environment and we need AAF as a product to support IPv6 in addition to IPv4.

    Comments (0) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    8

    Extend Radius server by PEAP support

    Currently Radius server supports only PAP while new (esp. mobile) devices use PEAP. It's the reason customers may not use AA for Radius & mobile device combination and ...

    Comments (1) | by: Dariusz L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    7

    Support FIDO 2 for Windows Authentication

    AAF supports only FIDO2 for webauthentication. Please add support for FIDO2 authentication in the windows login.

    Comments (1) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    6

    ability to disable biometrics or pin requirement on smartphone method ...

    Currently the require pin and require biometrics are set to true by default and when you set these to false this only allows users to disable this on there phone but it ...

    Comments (1) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    Use the NetIQ iOS app to generate one time passwords from a YubiKey ...

    We would like it if the NetIQ implemented the Yubico iOS SDK so that our users could use a single app for the smartphone method and also to get YubiKey one time ...

    Comments (0) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    device service should give error that bluetooth is not present

    The device service should give an error message if bluetooth device is not present like the device service does when a card reader is not present. Otherwise when a user ...

    Comments (0) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    Brute force / BOT Attack and Data leakage Prevention

    A change in authentication flow can help prevent brute force bot attacks: 1. Information leakage - valid usernames & passwords discovery 2. User lockout due to bad ...

    Comments (3) | by: Paul M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    Improve Client Log rotation

    Please improve the client log rolling The debugging of a sporadically issue is very worse if the logging is running several days/weeks. Today for the naming of the log ...

    Comments (0) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    Temporarily block user account after x failed attempts – when endpoint ...

    Feature: Being able to configure the system to temporarily block user account after x failed attempts (for instance account could be blocked for 30mn after 5 failed ...

    Comments (0) | by: Jerome M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    5

    AAF smartphone app should allow you to copy the TOTP enrollments

    AAF smartphone app should allow you to copy the TOTP enrollments

    Comments (1) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    Extend REST-API - Assign User to existing OTP Token or Bulk import

    Please add these two functions in the Rest-API 1) Assign Users to an Existing OTP Token which is imported 2) Import for OTP tokens with Serialnumber & set a flag to make ...

    Comments (4) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    4

    Mobile application for Android Face-Unlock option

    Since more and more Android mobiles are providing face unlock option it would be great to have face unlock as an additional option for the existing pin & fingerprint ...

    Comments (0) | by: Werner H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other