Restricting Self-Service Token Types dropdown list in v3.11

[greg_905]

Heya people,

I’m on privacyIDEA 3.11 with SQLite and an AD realm (my_domain). I want the self-service “Enroll a new token” dropdown to show only TOTP and SMS, but it’s still showing the full list of token types despite my efforts.

I’d love that list to just be TOTP and SMS.

Since the “tokentype” attribute doesn’t seem to be in the webUI any longer, I am trying with SQLite directly, but without much success. Is my syntax correct? Is there a better/different way to do this?

sqlite3 /var/lib/privacyidea/privacyidea.db “INSERT INTO policy (priority, active, name, scope, action, realm) VALUES (1, 1, ‘enroll_typelimit’, ‘enrollment’, ‘tokentype=totp sms’, ‘my_domain’);”

Restarted with systemctl, yet all token types still show.

Is tokentype=totp sms right? Any fixes/methods you can think of to make this work?

Thanks!
-greg

[jelinaunger]

The policy you might searching for is in the scope user/admin. In the group “enrollment” you can select the token types a user is allowed to enroll. The drop down list only shows the token types the user is allowed to enroll.

[greg_905]

I see it, thanks Jelinaunger! Was looking around for a pull down then seen the “This user is allowed…”

Thanks for taking the time Jelinaunger, appreciate it!

-greg