Hi! New here, excuse me if my question only depends on my not reading the docs thoroughly. Anyway, I’m looking at setting up privacyIDEA as our second factor managing system an to work in conjunction with our existing SimpleSAMLphp IdP. At this moment I am investigating push tokens to privacyIDEA app (Android so far). The privacyIIDEA module is installed in the IdP. Everything works just fine, but…
Only certain services will use 2FA at the moment so the pi module is configured as an authproc filter included in the metadata for the services. Works fine! So, when accessing a 2FA protected service SSP displays an authentication request to the user with a field labelled “Please confirm with one of these tokens:” and in the adjacent input box the text “Password + OTP” is shown. This is a bit confusing as the user set a “PIN” when enrolling the push token (in the input box it says “Enter password”, though). There is no OTP to enter, just the passord (pin). Then, when entering the correct password/pin nothing happens, unless the privacyIDEA app was used very recently. If it was closed it seems it doesn’t listen to push notifications. Starting the app, clicking the link to the protected service and entering password makes the the app say “ding” alright and show the Allow/Dismiss buttons. Pushing “Allow” here makes the app go back to rest but nothing happens in the authentification request window from SimpleSAML. Clicking the “Login” button again takes the user to the protected service.
So, the setup works and protects the selected services, but the user experience of the login process could be improved. Are there tunings and adjustments in SimpleSAML that could smoothen the process? Can the app be set to always listen to push notifications? And, this I could lookup myself but I ask anyway: Can the “Login” button be set in focus so that pushing enter after entering the password would do the same as clicking “Login”? If the second click is necessary this would make it a lot smoother.
The whole privacyIDEA seems really great and plans are to take it into limited production soon.