-
Planned
10
Determine RADIUS event by client IP address
In a situation where an environment has multiple RADIUS events, the RADIUS event that is intended to be used by the connecting RADIUS client is determined by the ...
Comments (3) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
3
Ability to link AAF v6.x Configuration portal and Desktop OTP app to ...
In multiple conversations with clients there is often the question around how does the NetIQ Smartphone App compares with Google authenticator and often enough the ...
Comments (0) | by: Bruno U. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
5
Windows Client set default Domain in config.properties
Add an option to the Windows Client to set a default Domain in config.properties. Example: defaultDomain: DOMAINNAME Expected behaviour: The user types USERNAME (without ...
Comments (1) | by: Christian B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
3
implement repository search order
In an environment with multiple repositories, it should be possible to define a search order for the repository. The first match wins should be used for authentication. ...
Comments (6) | by: Christian B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
9
Add a "password never expires" option for the local user repository
We need this option for the local Admin Account. The local Admin Account's password expires as any other user account. Please add a "password never expires" option to the ...
Comments (0) | by: Christian B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Planned
7
Allow Windows Client (and Linux/Mac) to set locale in ...
We have the need for certain Windows clients to have a specific locale set in the config.properties file. This should override the OS locale.
Comments (0) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
6
Use STARTTLS for LDAP-based repositories
LDAP supports STARTTLS to encrypt communications using TLS. STARTTLS begins as a plaintext connection over the standard LDAP port (389), and that connection is then ...
Comments (0) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
10
Ability for caching shared (linked) authenticators
In reference to SR#101184179111 Today, AAF is not able to cache credentials on windows,linux, macos for users they are using shared (linked) authenticators. Please ...
Comments (2) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
5
Using the Smartphone app push notification to Accept/Decline ...
During enrollment, we don't have a notification of the enrollment process that is acknowledged by the user being enrolled. So far the methods we have assume that the ...
Comments (0) | by: Bruno U. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
3
Provide option to disable the ability for the Enroll admin (Helpdesk) ...
Currently a helpdesk admin can enroll/remove enrollments for his/her own user and some clients do see this as a potential risk. Could we perhaps have a policy, similar to ...
Comments (0) | by: Bruno U. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
4
Allow Events to be configured to use a default repo (if desired) that ...
For our linux clients we need the option to either have an event ignore the login options list of repositories and use a default repo set at the event level or we need ...
Comments (0) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
5
Add NAS-IP-Address to Radius event
Please add NAS-IP-Address (Attribut-Type 4) to Radius event. Because some Appliances (as example Cisco ASA) do not support NAS-Identifier.
Comments (0) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Planned
4
Increase max email OTP TTL
Current situation: The max email OTP TTL is set at 360 seconds. Desired situation: We have the need for the email OTP TTL to be set at a higher value. Please allow the ...
Comments (0) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
2
Smooth transition of authenticators: no need to re-enrolment when ...
This is future request . Migrate the authenticators for already enrolled users who are migrated from existing MS AD domain to the new MS AD domain without all those ...
Comments (1) | by: Tomasz S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
1
Disallow user to scan QR code if user has enrolled already
By disable the re-enrollment function, user not able to rescan (by click the Save button) and delete the enrolled authenticator (By click the delete button) Can the ...
Comments (1) | by: Kin Fai L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
3
CEF Log Forward Policy Increase the Number of Servers
Today we have the Option to set only one Server. But if we can increase the number of servers, we have the option to spread the logfiles. This would a better solution ...
Comments (2) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
9
Ability that an enroll admin can only manage users from specific ...
Today every enroll admin can set or change methods for every user. This can be a security risk. We would like to have the ability that an enroll admin can only manage ...
Comments (1) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
5
Rolling over RADIUS authentication
getting a possibility to check PIN + OTP on AA and once this is not accepting / valid fowarding the PIN and OTP to a 3rd party AAA server -> using then the Radius Client ...
Comments (1) | by: Frank S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
7
Combine some AAF client login screens the login process is to heavy
AAF login screen 1 username input AAF login screen 2 chain selection input AAF login screen 3 password input AAF login screen 4 other method input For example ...
Comments (1) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
-
Votes
2
Netiq Mobile Application for Smartphones
Can we have an Option for, after a rollout the Application via AirWatch have a way for Auto Accept the EULA.
Comments (4) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration