649 questions
0
votes
1
answer
151
views
Snowflake - Python Connector - MFA - MacBook Finger Scan
I have a personal Snowflake account on my MacBook Air (Tahoe 26 M4). Snowflake is requiring MFA. I added a passkey with a "nickname", which I'm not entirely sure what that means. When I ...
2
votes
1
answer
69
views
Spring Boot OAuth2 + MFA: Cached /oauth2/authorize request becomes null on server (works locally)
Body:
I developed an IAM system using Spring Boot where I integrated multi-factor authentication (MFA).
Here’s the flow I implemented:
A client sends a GET request to /oauth2/authorize.
This redirects ...
-1
votes
2
answers
147
views
Connect to Snowflake OAuth Perl
since Snowflake is switching to MFA, I need to change some perl code to use access tokens.
Just doing something simple like this:
my $username = '';
my $pwd ='';
my $dbh = DBI->connect($dsn, ...
0
votes
1
answer
388
views
Authentication prompt (MFA) not appearing in MSAL flutter
In my flutter application, As I am using aad_oauth(https://pub.dev/packages/aad_oauth) for ADAL login and to migrate to MSAL now integrated msal_auth(https://pub.dev/packages/msal_auth).
The problem I ...
-2
votes
1
answer
2k
views
Error Code: 399287 Request Id: ff4d3486-2140-41e3-ab6f-f41ccaf70e00 Correlation Id: 7a5231f9-ec77-4ddb-be2e-67df124beda3 Timestamp: 2025-05-
Body
I'm encountering two separate but possibly related issues during user authentication with Microsoft Entra ID (Azure AD) using the OAuth 2.0 Password Grant flow.
Error: AADSTS900144 — Missing ...
-1
votes
2
answers
1k
views
Remove expired certificates from Azure Multi-Factor Auth Client (NPS Extension for Azure MFA)
I'm currently looking into how we should remove expired certificates from Azure Multi-Factor Auth Client, and properly cleanup the old certificates with Microsoft Graph PowerShell cmdlets.
Before the ...
0
votes
0
answers
81
views
Editing PIM policy not working when calling Update-MgPolicyRoleManagementPolicyRule
I am trying to edit PIM policy in Azure using powershell. I have written a function based on the link here following example 2
Function EditPIM($groupId){
$pim_policy = Get-...
0
votes
0
answers
89
views
Use Azure MFA via graph API in blazor app
I'm writing a blazor app which calls a web api backend. In the backend I have several calls to the graph api.
One is for example:
//User activates their eligible assignment for PIM for Groups
//https:/...
0
votes
0
answers
71
views
Custom Auth0 MFA Flow with Google Authenticator - Avoiding Universal Login Redirect
Context
We’re implementing MFA in our React application using Auth0. Our requirements are:
MFA should be required only for specific users (based on a flag in user metadata)
Google Authenticator is ...
0
votes
0
answers
51
views
Force connection through proxy for a service running with a nologin user
I have a off the shelf platform called confluent platform which is a enterprise solution based on Apache kafka. One of its component is Confluent Control center (C3) which is a GUI portal to manage/...
0
votes
0
answers
42
views
Error: webauthn has error ( use cross platform)
I try to use webauthn by using cross platform.
but, I got a error. ( use platform has normal )
Error message is Error - Error: 1 remaining bytes after end of encoding
const credentialOption = {
...
1
vote
1
answer
178
views
How to do MFA with Looker and Snowflake
By now, Looker connects to Snowflake using credentials.
Snowflake is demanding applications use MFA by 2026.
How do we accomplish this with Looker?
0
votes
1
answer
35
views
Can I re-use browser authentication with python REST?
I am trying to run a REST API with python. I can invoke the API successfully from the browser, but I get authentication errors when doing so from python or from the command line.
I've already ...
3
votes
0
answers
111
views
How to implement a PAM module with MFA support
I am writing a PAM module which will contact a https service to validate user. For the time being, the actual part is not started yet, I am just writing a toy to understand PAM and verify the whole ...
0
votes
1
answer
202
views
"There has been an error authenticating the request.";category="invalid_client"
I am trying to upload a file to the sharepoint which has MFA Authorization
string authority = $"https://login.microsoftonline.com/{tenantId}";
string filePath = @"C:\temp\todo.docx"...
0
votes
0
answers
70
views
AWS Cognito SMS MFA setup flow with boto3
What should be the correct login process after enabling MFA if the user has not specified a phone number in advance?
Hosted UI (or Managed Login) flow looks like this:
user enter login and password
...
0
votes
0
answers
52
views
How to Implement Conditional Navigation Based on Email Input with Microsoft MFA in Flutter?
I'm working on a Flutter application where I need to integrate Microsoft login with multi-factor authentication (MFA). I want to enhance the user experience by remembering the user's email on ...
0
votes
0
answers
164
views
Django's contrib auth + allauth's MFA - 2FA Setup
I added a feature called 2FA to my django project using django-allauth[mfa]. I also setuped the social account login process using google.
login form is from django.contrib.auth
2FA form is from ...
0
votes
1
answer
186
views
How to Disable Re-authentication in Django's allauth MFA's TOTP
I am trying to customize the reauthentication form of the mfa. I aslo customized the TOTP activate and deactivate form and it works, but now i am struggling to customize the reauthentication form with ...
0
votes
0
answers
127
views
multi device/session login support in ory kratos
I'd like to implement that login scenario in my service:
I have mobile app and web app. User already logged in on mobile, and want to login to the web app.
So, on the web page user clicks "Login ...
0
votes
0
answers
50
views
SMS/Email/TOTP/Hardware keys, which one?
When you’re setting up MFA for an app, system, or workflow, how do you decide what method to use—SMS, email, TOTP, or hardware keys? Do you stick to one across the board, or pick based on the ...
1
vote
1
answer
279
views
How do I unenroll/reset Firebase user from TOTP 2FA?
Let's say my user enrolled to TOTP in my web app, but lost access to his Authenticator App, or deleted account in it. Now my user can't access my app, since he won't be able to get Secret Code to his ...
3
votes
0
answers
363
views
Sending emails using Nodemailer throgh Entra outlook domain with Oauth2 after receiving a 536 5.7.8 another step is required in authen
Im making an Node.js app for my work that should send pdfs in emails through our Entra outlook work domain. Currently I am trying to do so with Oauth2 sonce we use MFA for our accounts and the ...
1
vote
1
answer
155
views
Blazor MFA Login using Entra - Setting Session Length
I have a Blazor website that uses MFA loin via Entra and it works fine, what doesn't work is the session time. After 1 hour, the session ends and the user is logged out and forced to log back in. Is ...
0
votes
1
answer
374
views
How can you remove Multi-Factor Authentication from an app user using React and Firebase?
I want to set up SMS based MFA in my ReactJS app. Users of the app sign in with email/password and this is all handled by firebase.
I've started to set up MFA, so far users can enable it on their ...
0
votes
0
answers
680
views
Azure Global Admin doesn't have permission to manage authentication methods
I am the Global Admin for an Azure tenant on the free tier (tied to a Microsoft 365 E1 nonprofit account). Following the automatic rollout of Security Defaults, I have one user who did not set up a ...
0
votes
1
answer
146
views
Firebase Multi-Factor Authentication Suddenly Failing with 500 Internal Server Error for Hungary phone numbers
Once authenticated with e-mail and password, the identitytoolkit.googleapis.com/v2/accounts/mfaSignIn:start call fails:
{
"error": {
"code": 500,
"message": "...
0
votes
1
answer
342
views
Azure Authenticatication Flow in a Desktop App (WinForms C#)
I would send mails through SMTP (and read through IMAP) over Azure using OAuth for a Desktop App (C# WinForms .NET Framework 4.8). The account has MFA and it's not the windows account. I've read some ...
1
vote
0
answers
266
views
Automating Snowflake MFA, or some workaround
I have written Python code in VSCode which connect to snowflake every 6 hours and run some processes. Now the issue is that this connection to Snowflake I am not able to automate it, since a code is ...
0
votes
0
answers
122
views
How can I achieve 2FA auth based on wildfly elytron?
I'd like create an application whit capable of MFA. Password and OTP can be enough good for us.
We don't find any solution of it. There are
'aggregate realm' but just multi authorization
'failover ...
0
votes
1
answer
82
views
WSO2 IS 7.0.0 for MFA - Could not convert socket to TLS javax.mail.MessagingException
I am trying to configure the multi factor authentication with WSO2 Identity Server 7.0.0. I have provided below information in deployment.toml file
[output_adapter.email]
from_address= "...
-1
votes
2
answers
64
views
Active Directory Federation server - verification code by email
Does anyone know where or how I can set SMTP server details in the Active Directory Federation Service? I need this so ADFS can send a verification code to someone's email address.
My setup includes ...
1
vote
0
answers
307
views
How to implement two-factor authentication in SPA application with ASP.NET Core 8.0 identity as backend
I'm trying to use all the new features in ASP.NET Core 8.
I'm using this code
using IspH2H.Engine;
using IspH2H.Engine.Entities;
using IspH2H.WebAPI.Security;
using Microsoft.AspNetCore.Authentication....
1
vote
0
answers
70
views
How to implement recovery codes for TOTP multifactor authentication?
For multifactor authentication systems that make use of time-based OTPs and authenticator apps (such as Authy, Google Authenticator, etc), there needs to be a fallback mechanism in case the user loses ...
0
votes
1
answer
155
views
Azure Security Defaults and Power BI Embedded
Whenever I try to login to Outlook, Power BI or Azure, I keep getting a pop-up telling me that Security Defaults will be enabled for the entire organization in x days (it is in 2 days now). There is ...
0
votes
0
answers
147
views
How to implement a secure authentication (with device check) in a Flutter App?
I am developing a mobile app where security is really key.
I would like to implement a secure authentication flow where:
I can track and limit the number of devices where a user can be logged in from
...
1
vote
0
answers
103
views
Stop the default multi-factor enrolment notification email template
I am in the process of customizing all of the auth flows in firebase using my own backend emailing service. I have been successful customizing all of them and have a custom multi-factor enrolment ...
0
votes
2
answers
223
views
Getting Access denied error while using aws cli for enabling MFA delete on S3 bucket
Created user and that user having administrator permission and as well S3 bucket full access.
Created S3 bucket with default setting.
Trying to enable MFA delete via AWS CLI:
aws s3api put-bucket-...
0
votes
2
answers
397
views
Accessing O365 Mailbox without MFA in Python
I'm working on a Python script to access two of my O365 mailboxes. One mailbox has multi-factor authentication (MFA) enabled, and the other doesn't. I've successfully implemented access for the MFA-...
0
votes
0
answers
177
views
VB.Net application connect to SQL Azure Instance with MFA
I have a VB.NET application that has 2 routines to open databases in SQL which all worked fine until we migrated databases to an SQL Azure Instance with MFA.
The first sequence works fine with MFA and ...
0
votes
1
answer
96
views
Unable to connect to Dynamics in SSIS Project - Unsupported Browser error
I’m working in SSIS on a Windows Server 2022 Standard machine, Visual Studio Enterprise 2022.
I want to set up a connection to Dynamics 365 online using the Kingswaysoft Connector.
I enter the ...
0
votes
1
answer
682
views
How can I determine the duration of valid time remaining on a TOTP token countdown?
I'm studying concepts of OTP with a small application to generate and validate HOTP and TOTP tokens. I'm stuck on the formula used to determine the expiration in seconds of a TOTP token at any given ...
0
votes
1
answer
600
views
How to audit MFA status of users in Azure
I am trying to build a Policy definition to list out the users who have not enabled MFA in Azure.
I saw that i can't target users through Policy
Any solutions or views?
I tried altering the built-in ...
0
votes
1
answer
1k
views
Certain 2fa authenticator apps not working in Keycloak. Any Workarounds?
I hope you are doing good.
I have a question. We are using Keycloak as our auth provider for our Services, and for some users, we want to have 2fa enabled.
Now, it appears that not all authenticator ...
3
votes
0
answers
566
views
Is it possible to use WebAuthn with a hard token over a remote desktop connection?
We are attempting to stand up a web application that should only be accessible from a dedicated RDS server, but which requires users to authenticate via hard tokens. This of course means that the user'...
0
votes
0
answers
1k
views
How to disable per-user MFA settings using Microsoft Graph PowerShell?
I'm rewriting all my PowerShell script from MSOnline to Microsoft Graph PowerShell.
One of my existing script below is about to disable specific user's MFA settings.
Set-MsolUser -UserPrincipalName $...
0
votes
2
answers
2k
views
ASP.NET Core Identity 2FA with Authenticator app in ASP.NEt Core Web API
I am developing an API in ASP.NET Core 8 using ASP.NET Core identity which uses 2FA with Authenticator app for users who have enabled it.
The problem is this. I have checked on the 2FA with ...
0
votes
0
answers
172
views
Can't enroll for using TOTP MFA inside gcloud Identity platform for multi-tenants
On Google Identity Platform we have multi-tenants, TOTP is enabled:
curl -X GET "https://identitytoolkit.googleapis.com/v2/projects/xxx/tenants/xxx" -H "Authorization: Bearer $(...
2
votes
0
answers
448
views
Enforce MFA for Google Cloud project
For security enhancement, I'd like to enforce MFA for everyone trying to access our Google Cloud project(s).
Our project has third-party partners, some of which doesn't have a domain and is using ...
1
vote
0
answers
2k
views
Use HMAC-SHA-256 or HMAC-SHA-512 with the Google Authenticator App
The Google Authenticator implements the one-time passcode as described in RFC 4226, HOTP: An HMAC-Based One-Time Password Algorithm and its extension RFC 6238, TOTP: Time-Based One-Time Password ...