Cannot Use TOTP after changing Datastore Type

Versions Affected: Any version prior to 9.0.2.

Decription: Users cannot authenticate after inputting the TOTP during Two-Factor Authentication when a change is made to the datastore type. 

Cause: When users enroll for the TOTP, the datastore type that is selected is used to search for that attribute within your Active Directory.  By changing the datastore type, it automatically changes the search attribute thus not being able to properly search for the TOTP value in the Active Directory.

Resolution: Whichever search attribute which was used when users enrolled for the TOTP is what needs to be in the search attribute under the search filter.  The "searchFilter" field can remain the same, but the "Search Attribute" needs to match the configuration used for when users enrolled.  

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.