search

LastSquirrelIT / MultiOneTimePassword-CredentialProvider

Aims to improve the overall security of the Windows logon process by adding 2FA Authentication. Uses multiOTP as authentication endpoint.
Apache License 2.0
94 stars 44 forks source link

Need to enter username/password twice #29

Open SixFive7 opened 6 years ago

SixFive7 commented 6 years ago

Hi,

When using the credentialprovider on a remote desktop 2016 server using AD credentials we need to enter the username and password inside the mstsc client in order to connect to the session host. Once connected we need to enter the username and password again, this time together with a token. Is this a misconfiguration on our side? Or is it a limitation of the credentialprovider? A perfect solution would be if the username and password could be pre-populated from the RDP session or not shown at all. Resulting in a window just asking for the OTP. Any suggestions?

Kind regards (and thanks for the work on this important project!)

multiOTP commented 6 years ago

Hello SixFive7,

This is a special behaviour when NLA is enabled. Unfortunately, only the Microsoft Credential Provider can use the credential typed at the begininng.

Please note that we have enhanced this MultiOneTimePassword-CredentialProvider thanks to various contributors, and it's now available in the multiOTP project (https://github.com/multiOTP/multiOTPCredentialProvider). We will do enhancements in this fork.

Regards,