pspete / psPAS

PowerShell module for CyberArk Privileged Access Security REST API
https://pspas.pspete.dev
MIT License
291 stars 91 forks source link

2FA Authentication #328

Closed jonnadulasudhakar closed 3 years ago

jonnadulasudhakar commented 3 years ago

The current authentication is not covered all 2FA.

Some of the 2FA is configured to issue secret code by SMS or mobile application after LDAP authentication.

Please help to include the logic to cover the above 2FA.

pspete commented 3 years ago

Hi. Please include all the relevant details in the issue report. What error do you receive when attempting 2FA currently? psPAS already had logic to deal with OTP sent via SMS or mobile application after initial authentication.

pspete commented 3 years ago

Any further details you can provide @jonnadulasudhakar ?

jonnadulasudhakar commented 3 years ago

I am still not able to use the Radius authentication.

Here is the sequence: Login to PVWA Enter credentials After LDAP authentication, we prompted with OTP screen The sms will be sent to user mobile after authentication

How do we get OTP and get authenticate.

Thanks, Sudhakar

jonnadulasudhakar commented 3 years ago

Please ignore my comments. I am able to login New-PASSession -Credentials $ced -BaseURI HTTPS://pvwa -type RADIUS

System prompted with OTP and after entering the OTP, I got success authentication.

Thanks for providing useful information 🙏🏻🙏🏻

pspete commented 3 years ago

Thanks for the update - will close the issue