• Planned

    7

    Allow Windows Client (and Linux/Mac) to set locale in ...

    We have the need for certain Windows clients to have a specific locale set in the config.properties file. This should override the OS locale.

  • Votes

    7

    Helpdesk - Granular access rights for enrolladmin to edit users

    Today every Enroll-Admin can change all authenticator of every users. This may cause a security issue. Which means that an enroll admin can take over an account from ...

  • Votes

    7

    Helpdesk - Two-Eyes procedure to change authenticator from user

    In regard to this Idea: https://ideas.microfocus.com/MFI/advance-authentication/Idea/Detail/15336 It would be good if there is an option to define which groups need a ...

  • Votes

    7

    Kerberos Authentication for internal AD users

    It would be great, if we could allow internal AD members Kerberos integrated authentication.

  • Votes

    7

    Clear message when deleting authenticators

    Currently, when deleting an authenticator, a user only gets a message asking if he wants to continue. This can be confirmed with 'Ok' or canceled. Since this system is ...

  • Votes

    7

    Validate correct password when saving repository settings

    Every time you adjust the settings of a repository, you are required to provide a password for the user you are connecting as however there is no check to see if the ...

  • Votes

    7

    TOTP on Smartwatch

    Currently it is the case that the request for a TOTP via the smartphone also appears on a SmartWatch, but only as a message. It would be great if you could confirm the ...

  • Votes

    7

    Remove Copyright information in Login Screen

    Remove the Copyright information in Login Screen (Copyright © 2017 NetIQ. All rights reserved. Build: NAAF-5.6). For risk purposes, the product name should not be shown.

  • Votes

    7

    Combine some AAF client login screens the login process is to heavy

    AAF login screen 1 username input AAF login screen 2 chain selection input AAF login screen 3 password input AAF login screen 4 other method input For example ...

  • Votes

    7

    Display serial number of enrolled HOTP authenticator

    It would be beneficial for a user to see the serial number of their currently enrolled HOTP authenticator in the authenticators management portal. A user may have one or ...

  • Votes

    7

    Let's change eToken/Smartcard password on credential provider

    Now there is no possibility to change the eToken password at the credential provider. if the password is expired the user has to phone the Helpdesk to create a emergency ...

  • Votes

    7

    AdminGUI “Endpoints” screen - Needs to allow Helpdesk/ENROLL ADMINS ...

    AdminGUI “Endpoints” screen - Needs to allow Helpdesk/ENROLL ADMINS role the ability to access this screen. Today they can only see user enrollments, but an equal part of ...

  • Votes

    7

    Configurable Offline OTP Cache Size

    We have laptops setup to use 2 factor authentication on logon. Windows natively handles the caching of AD credentials properly (and can be configured via group policy). ...

  • Votes

    6

    Igel ThinClient Support

    It will be great if Igel ThinClients will be supported. We expect more than 10.000 Users which will need this.

  • Votes

    6

    Option to enable automatic email to send reports to admins

    Option to send email with reporting to specific emails. ability to schedule reporting e.g. once a week to generate report with user activity etc.

  • Votes

    6

    TACACS support

    It would be great to support TACACS integration, not only RADIUS. Many network devices today are configured using TACACS, not RADIUS.

  • Votes

    6

    ability to disable biometrics or pin requirement on smartphone method ...

    Currently the require pin and require biometrics are set to true by default and when you set these to false this only allows users to disable this on there phone but it ...

  • Votes

    6

    Add the ability to restrict authentication to only managed devices

    Customer would like the ability to restrict mobile device (specifically Smartphone method) to ONLY devices that are currently being managed by an MDM solution. In this ...

  • Votes

    6

    Syslog messages for failed attempts to AdminUI and Helpdesk events due ...

    Current situation: Today, when a user attempts to login to the AdminUI and authenticates successfully but does not have the proper authorization (i.e. does not have the ...

  • Votes

    6

    Offline Update for AAF

    It would be nice if you make a solution to update AAF with an offline file over the Web Management Console (9443). Reason: In some customer environments it is not ...