We love to hear your ideas for improving Advanced Authentication framework.

Page 10 
327 Ideas
428 Comments
1,553 Votes
  • Planned

    5

    AAF smartphone app should allow you to copy the TOTP enrollments

    AAF smartphone app should allow you to copy the TOTP enrollments

    Comments (1) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    12

    Allow the AAF smartphone app to acceptance requests from the locked ...

    Allow the AAF smartphone app to acceptance requests from the locked phone screen

    Comments (2) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    7

    Combine some AAF client login screens the login process is to heavy

    AAF login screen 1 username input AAF login screen 2 chain selection input AAF login screen 3 password input AAF login screen 4 other method input For example ...

    Comments (1) | by: brian r. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    2

    Netiq Mobile Application for Smartphones

    Can we have an Option for, after a rollout the Application via AirWatch have a way for Auto Accept the EULA.

    Comments (4) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    Event Based Lockout Policies

    We would like to see event based lockout policies with the ability to configure different lockout attempt thresholds and durations and not effect other events for the ...

    Comments (2) | by: Dennis R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    3

    A way to delete OATH seed-files more than one per selection.

    A way to delete OATH seed-files more than one per selection. If we would get a checkbox for the selection of the file to be deleted. To delete several Seed-files at once.

    Comments (1) | by: Dennis M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    Adding parameters to MSI properties - NAAF Device Service MSI Package

    We would like to install device service and change these 2 custom parameters: pki.vendorModule pki.forceVirtualChannels Is it possible that you will add these ...

    Comments (1) | by: Harel E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    4

    Allow the servers used by a repository to be configured on one site ...

    Current situation: The configuration for a repository is replicated to each site except for the servers. It requires the administrator set the servers on each site and ...

    Comments (2) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    3

    Device Fingerprint

    Hi, At the moment, we could define 2 Chains whereby Chain1 is LDAP Password+Smartphone and Chain2 is LDAP Password for example. Chain 1 is used for the 1st time and ...

    Comments (1) | by: Keng Tat L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    7

    Support FIDO 2 for Windows Authentication

    AAF supports only FIDO2 for webauthentication. Please add support for FIDO2 authentication in the windows login.

    Comments (1) | by: Kevin S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    6

    Hide offline OTP option if offline OTP is disabled in Smartphone ...

    Current situation: When offline OTP is disabled for the Smartphone method, the user is still presented the ability to authenticate with the offline OTP at the AAF web ...

    Comments (1) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    7

    Let's change eToken/Smartcard password on credential provider

    Now there is no possibility to change the eToken password at the credential provider. if the password is expired the user has to phone the Helpdesk to create a emergency ...

    Comments (2) | by: Markus D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    accept only PKI keys from trusted CAs

    Add an option to disable the item "Generate a key pair" when the user register a PKI token, and let users only select a valid certificate from the token. This would be ...

    Comments (1) | by: Livio B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Separate out application logs into it's own tab/file

    Current situation: Application logs (in CEF) are written to Syslog. Syslog also has OS-related information written to it. It is sometimes difficult to find certain ...

    Comments (1) | by: Tim S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    3

    Disable modification of automatically enrolled Authenticators in the ...

    Some Authenticators are automatically created by Advanced Authentication, e.g. LDAP password. If you click on the Authenticator in the Self-Service portal, the Edit page ...

    Comments (1) | by: Andreas H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Votes

    3

    Want a way to get a report on linked credentials

    So want to know is there a way to get a report on linked credentials 2018-10-04T14:18:38.864705 (UTC+0000)+00:00 aafapp CEF:0|AAA|Core|5.0|101|User was successfully ...

    Comments (3) | by: Kevin P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    13

    Windows Client Login offline Master token

    When we install the Windows Client on a device, we can enable the Offline login to permit the user to access their computer when they do not have access to internet. ...

    Comments (3) | by: Hugo D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    8

    Extend Radius server by PEAP support

    Currently Radius server supports only PAP while new (esp. mobile) devices use PEAP. It's the reason customers may not use AA for Radius & mobile device combination and ...

    Comments (1) | by: Dariusz L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    2

    Add Gemalto Safenet Seedfile format

    We have a customer wanting to replace a 350 user Gemalto Token Solution for Citrix Netscaler Login. They would like to keep on using the token hardware but Gemalto has a ...

    Comments (2) | by: Hauke B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    11

    Allow more than one smartphone\PKI card for user

    We want to be able to use more than one smartphone\PKI card authenticators. For example, user has more than one smartphone and he want to be able to authenticate using ...

    Comments (2) | by: Tomer A. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations