search

neos-sdi / adfsmfa

MFA for ADFS 2022/2019/2016/2012r2
MIT License
143 stars 53 forks source link

Cannot add code MFA for user #267

Closed marcdieters closed 2 years ago

marcdieters commented 2 years ago

Hello,

I'm trying to setup ADFSMFA. I installed the msi (adfsmfa.3.1.2211.0), registered the system and server. Then I opened the MFA MMC and enabled only the TOTP option and selected the mixed security policy.

For my relying party trust, I selected everyone with MFA.

When I sign in, I get the option to register an authenticator application. I scan the QR code and click continue. On this screen I enter the code shown in google authenticator.

Then I get this: image

Can you please assist with this ? I have no clue where to look for next.

Thanks !

redhook62 commented 2 years ago

Hello,

Make sure that your servers are well synchronized on an NTP pool, indeed TOTP is partly based on time.

On the other hand, do not change the number of digits required, as well as the duration for the generation of the code. Google Authenticator, Microsoft Authenticator do not fully implement the RFC. Only Authy and Aegis authenticator apps handle this without issue. So stay on 6 digits and 30 seconds.

regards

marcdieters commented 2 years ago

Hi,

Thanks for the quick reply. I didn't realize that my LAB DC's were running one hour behind. I fixed that and now it's working perfectly.

Awesome thing you've build here !