I want to use on Windows for one groups, and disable otp for others

[Pinta]

I want to use privacyidea for windows login manage for Admin users, my main goal is to ask 2fa from only one group that contains the admin users and hide the OTP text box for other users at login. Is this possible?

[cornelinux]

Usually you would use the privacyIDEA server to decide whether the user should use a 2nd factor or not.

This can be done by configuring challenge response. On the privacyIDEA server you could use the passOnNoToken policy or the passthru=userstore policy to allow users without a token to login.

8.3. Authentication policies — privacyIDEA 0.0+g5ed5f6a33 documentation

8.3. Authentication policies — privacyIDEA 0.0+g5ed5f6a33 documentation

You can also configure a excluded group in the CP. But you should keep your logic on the client side simple.

Configuration — privacyIDEA Credential Provider 2.2 documentation