Andrew Wood
Activity overview
Latest activity by Andrew Wood-
Andrew Wood commented, Hello Akhilesh, People often find adding a static header in IIS easier to implement. For example, using this KB https://support.secureauth.com/hc/en-us/articles/360024990452-Access-to-XMLHTTPReq...
-
Andrew Wood commented, Jose, you're correct, it's a bad example. I'll edit it to use a more valid example at some point. For .Well-known you'd want to create a folder with that name and then create a small web.config ...
-
Andrew Wood created an article, How to use OIDC EndSession Endpoint
Version Affected: All Description: The OIDCEndSession Endpoint is used to allow the user to clear out our cookies. Optionally, you can use it to redirect the user back to the OpenID URL in order...
-
Andrew Wood created an article, Enable 2FA for CentOS Gnome GUI
Version Affected: All Description: After following our Linux PAM guide. These are the steps to enable 2FA on the GUI Cause: The Doc linked above doesn't cover this at present Resolution: ...
-
Andrew Wood created an article, Linux SSH prompting for Password twice
Version Affected: All Description: After following our Linux PAM guide. Users report that SSH makes the type Username | Password | 2nd Factor | Password Cause: /etc/pam.d/SSHD configuration...
-
Andrew Wood created an article, SP Start URL not working on Custom SAML page
Version Affected: All Description: Secureauth using an SP Start URL to move Users to the SP in order to generate an AuthN request when Users have decided to bookmark the IdP page instead of the ...
-
Andrew Wood created an article, Does SecureAuth work with the Microsoft Mobile Authenticator App
Version Affected: All Description: SecureAuth will work with the Microsoft Mobile Authenticator App. It will work for Oath Tokens (Time based Passcodes) but it will not work for our Push Notific...
-
Andrew Wood commented, Hello Akhilesh, Good Question. We follow the standards here https://openid.net/specs/openid-connect-core-1_0.html#HybridAuthResponse as you can see, they recommend the # It's more obviously called...
-
Andrew Wood created an article, X-Frame-Options Header being set to SAMEORIGIN
Version Affected: 19.07.x Description: In 19.07.x SecureAuth is setting an extra header called X-Frame-Options with a value of SAMEORIGIN. This can break the use of iFrames. Cause: Our Antifor...
-
Andrew Wood created an article, Adaptive Auth Country Restrictions behaviour change in Identity Platform
Version Affected: 19.07.01+ Description: When upgrading from an older version of SecureAuth, Country restrictions changes the way it behaves for internal IPs in the Classic Experience Cause: T...