Frequently Asked Questions
- FAQ: Is SecureAuth Affected by the PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619?
- FAQ: What Are the SecureAuth Threat Service Definitions?
- FAQ: Hardware Token Support
- FAQ: What Do the Java (JRE) Versions Mean on the System Info Tab?
- FAQ: Are Unsigned Drivers Supported by SecureAuth?
- FAQ: Does Credential Provider or Login for Windows Support Citrix?
- FAQ: Are 3rd Party Authenticator Apps Supported with SecureAuth?
- FAQ: Can .NET Core Be Removed from an Air-Gapped IdP Deployment?
- FAQ: Does SecureAuth Support OTPs That Combine Characters and Numbers?
- FAQ: What Does the SAML 2.0 RelayState URL Function Do?
- FAQ: How Do OIDC Scopes Relate to Claims?
- FAQ: Why Does the Introspection Endpoint Say Consent Has Been Revoked for a Valid Token?
- FAQ: Can the Application Names in Login by Application Be Changed?
- FAQ: Can I Use Wildcards in the Redirect URI of an OAuth Realm?
- FAQ: What Time Intervals and Passcode Lengths Does Each Authenticator App Support?
- FAQ: What Is the Difference Between an OATH Seed and an OATH Token?
- FAQ: How Does Cookie Revocation Work?
- FAQ: Does the Service Cert (cloud.secureauth.com) Need to Be Renewed?
- FAQ: What Are the Available Entra ID User Property Names for Profile Mapping?
- FAQ: Can the SMS/Voice/PUSH OTP Length Be Increased for New Experience Realms?
- FAQ: Why Does a Certificate Show sha256 as Signature Algorithm but sha1 as Thumbprint Algorithm?
- FAQ: Can Qualys Agent Be Installed on a SecureAuth IdP?