We love to hear your ideas for improving Advanced Authentication framework.

Page 9 
327 Ideas
428 Comments
1,553 Votes
  • Votes

    4

    Allow AAF to import branding from Access Manager automatically

    Hi guys, Can we please update the https://aafapp.demo.live/admin#/policies/WebAuthOptions page so that it can automatically download the standard branding from Access ...

    Comments (0) | by: Marcus V. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    Add simpleSAML to Appliance for testing and POC

    Would like ability to have simpleSAML on appliance. Mainly quick and simple to setup and test. As a reference the following I found in the Internet just do not like the ...

    Comments (0) | by: Kevin P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    Add NAS-IP-Address to Radius event

    Please add NAS-IP-Address (Attribut-Type 4) to Radius event. Because some Appliances (as example Cisco ASA) do not support NAS-Identifier.

    Comments (0) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    3

    TOTP Enrollment with serial via public api

    We would like to enroll hardware TOTP tokens via public API with unprivileged session, in combination with token serial plus first OTP. Request example: ...

    Comments (0) | by: Marc R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    Auto Enroll TOTP on Smartphone App

    With latest release user can be sent email to enroll Smartphone which is great. Can we also get this option for TOTP? Some customers do not want to use Push ...

    Comments (0) | by: Kevin P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    4

    Increase max email OTP TTL

    Current situation: The max email OTP TTL is set at 360 seconds. Desired situation: We have the need for the email OTP TTL to be set at a higher value. Please allow the ...

    Comments (0) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    4

    Allow for customization of labels when using TOTP

    Typically, when you enroll a device using a TOTP authenticator app like Google's or Microsoft's, after you enroll, the account shows up with the name of the application ...

    Comments (0) | by: Matt W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    8

    Allow for customization of labels when using TOTP

    Typically, when you enroll a device using a TOTP authenticator app like Google's or Microsoft's, after you enroll, the account shows up with the name of the application ...

    Comments (4) | by: Matt W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    11

    Add support for Mac OS TouchID as an advanced auth authentication ...

    Add support for Mac OS TouchID as an advanced authentication authentication method

    Comments (0) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Support for Mobile Connect

    Requesting to add Mobile Connect ( general info: https://mobileconnect.io and developer info: https://developer.mobileconnect.io ) as a supported method for Advanced ...

    Comments (0) | by: Pekka L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Time Shifting for Hard Token

    We recently received a new batch of TOTP token from Vasco Go6 TOTP Type, noticed that we need to tune the Window Period into a bigger value to authenticate successfully. ...

    Comments (1) | by: Kok Khai Y. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    Smooth transition of authenticators: no need to re-enrolment when ...

    This is future request . Migrate the authenticators for already enrolled users who are migrated from existing MS AD domain to the new MS AD domain without all those ...

    Comments (1) | by: Tomasz S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    Extend API to simplify user repo migrations

    It happens that clients need to migrate directory services. Even because of technology changes, mergers or acquisitions. In such cases they need to manually rewrite ...

    Comments (2) | by: Dariusz L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment
  • Votes

    1

    Disallow user to scan QR code if user has enrolled already

    By disable the re-enrollment function, user not able to rescan (by click the Save button) and delete the enrolled authenticator (By click the delete button) Can the ...

    Comments (1) | by: Kin Fai L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    3

    CEF Log Forward Policy Increase the Number of Servers

    Today we have the Option to set only one Server. But if we can increase the number of servers, we have the option to spread the logfiles. This would a better solution ...

    Comments (2) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    9

    Ability that an enroll admin can only manage users from specific ...

    Today every enroll admin can set or change methods for every user. This can be a security risk. We would like to have the ability that an enroll admin can only manage ...

    Comments (1) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    9

    Customize wording inside user facing interfaces

    Looking to customize verbiage inside user facing web interfaces to match either internal language/references or technical level of staff. For instance: "<p>Welcome to ...

    Comments (2) | by: Robert R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Votes

    5

    Rolling over RADIUS authentication

    getting a possibility to check PIN + OTP on AA and once this is not accepting / valid fowarding the PIN and OTP to a 3rd party AAA server -> using then the Radius Client ...

    Comments (1) | by: Frank S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    2

    granular rights for authenticator sharing

    Customer needs this option on the one hand for admins, but it could be to much risk if a helpdesk employee can takeover an CxO authenticator provide an extra role to ...

    Comments (1) | by: Peter R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Votes

    3

    LDAP Password Expired

    If the LDAP Password Expired, can we get an Option for Set a New Password in the Enrollment Center to change or set a new Password.

    Comments (0) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other