We love to hear your ideas for improving Advanced Authentication framework.

Page 2 
327 Ideas
428 Comments
1,553 Votes
  • Planned

    7

    Allow Windows Client (and Linux/Mac) to set locale in ...

    We have the need for certain Windows clients to have a specific locale set in the config.properties file. This should override the OS locale.

    Comments (0) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    7

    Validate correct password when saving repository settings

    Every time you adjust the settings of a repository, you are required to provide a password for the user you are connecting as however there is no check to see if the ...

    Comments (5) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    7

    Combine some AAF client login screens the login process is to heavy

    AAF login screen 1 username input AAF login screen 2 chain selection input AAF login screen 3 password input AAF login screen 4 other method input For example ...

    Comments (1) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    7

    Let's change eToken/Smartcard password on credential provider

    Now there is no possibility to change the eToken password at the credential provider. if the password is expired the user has to phone the Helpdesk to create a emergency ...

    Comments (2) | by: Markus D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    7

    Configurable Offline OTP Cache Size

    We have laptops setup to use 2 factor authentication on logon. Windows natively handles the caching of AD credentials properly (and can be configured via group policy). ...

    Comments (6) | by: Mike R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Option to enable automatic email to send reports to admins

    Option to send email with reporting to specific emails. ability to schedule reporting e.g. once a week to generate report with user activity etc.

    Comments (0) | by: Alexander T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Syslog messages for failed attempts to AdminUI and Helpdesk events due ...

    Current situation: Today, when a user attempts to login to the AdminUI and authenticates successfully but does not have the proper authorization (i.e. does not have the ...

    Comments (1) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    6

    Hide offline OTP option if offline OTP is disabled in Smartphone ...

    Current situation: When offline OTP is disabled for the Smartphone method, the user is still presented the ability to authenticate with the offline OTP at the AAF web ...

    Comments (1) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Add date/time parameter for Email OTP method

    We want to have the ability to configure date/time parameter. Currently we're limited in what we can configure in the email template. By sending date/time, users can for ...

    Comments (1) | by: I e. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    6

    search field for locked user for the helpdesk portal / ability to ...

    It would be a good to add these two features. 1) Add search field to search for users in the locked users-list 2) If a user will be opened in the help desk (where you can ...

    Comments (1) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Configuration of Windows Client through command line arguments at ...

    The Windows Client must be configured/customized post installation through the config.properties file. For options where it makes sense, it would be beneficial to ...

    Comments (7) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Use STARTTLS for LDAP-based repositories

    LDAP supports STARTTLS to encrypt communications using TLS. STARTTLS begins as a plaintext connection over the standard LDAP port (389), and that connection is then ...

    Comments (0) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    6

    Forward other logs besides Syslog

    We would like to be able to forward more than just the 'Syslog' log to a syslog server. We find the other logs having valuable information and being able to forward all ...

    Comments (4) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Regenerate endpoint id and secret without having to delete and ...

    It would be convinenet to be able to regenerate an Endpoint's id and secret instead of the current process of having to delete the endpoint and re-creating it. When ...

    Comments (1) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Provide a country code dropdown when enrolling in SMS OTP

    The user should be provided a dropdown box with a list of country codes that they must select before they can save their phone number for the SMS OTP. This forces their ...

    Comments (3) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Event Based Lockout Policies

    We would like to see event based lockout policies with the ability to configure different lockout attempt thresholds and durations and not effect other events for the ...

    Comments (2) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Windows Client set default Domain in config.properties

    Add an option to the Windows Client to set a default Domain in config.properties. Example: defaultDomain: DOMAINNAME Expected behaviour: The user types USERNAME (without ...

    Comments (1) | by: Christian B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Add NAS-IP-Address to Radius event

    Please add NAS-IP-Address (Attribut-Type 4) to Radius event. Because some Appliances (as example Cisco ASA) do not support NAS-Identifier.

    Comments (0) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Option to hide QR Code in TOTP enrollment

    It would be a good feature if there is an option to disable the QR-Code or hide the QR Code, if TOTP method is enrolled. If a user re-open an enrolled T-OTP over the ...

    Comments (3) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Check if firewall ports are open

    We would prefer an Option to check if needed Firewall Ports are open. In our opinion this check-up can be located in the Management Consol of AAF. Additionally there ...

    Comments (0) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration