0 vote
PasswordState is moving into v9 where there is now an endpoint URI for OTP retrieval, could this be added into RDM?
For the "winapi" here is a powershell example of use:
GET /winapi/onetimepassword
# PowerShell Request $PasswordstateUrl = 'https://passwordstate/winapi/onetimepassword/<PasswordID>' Invoke-Restmethod -Method GET -Uri $PasswordstateUrl -useDefaultCredentials
# Response
HTTP/1.1 200
[
{
"OTP": "839117"
}
]
For the standard API:
GET /api/onetimepassword
# PowerShell Request
$PasswordstateUrl = 'https://passwordstate/api/onetimepassword/<PasswordID>'
Invoke-Restmethod -Method GET -Uri $PasswordstateUrl -Header @{ "APIKey" = "<apikey>" } # Response
HTTP/1.1 200
[
{
"OTP": "839117"
}
]
I can test anything needed to expedite the feature add or provide more information needed.
Thanks in advance!!
Eric S.
--
Eric Sakariasen
Connetic IT Support
Also to add, so far I haven't seen any degradation in any functionality with the current RDM integration in PasswordState v9.
--
Eric Sakariasen
Connetic IT Support
Hello,
Thanks for the request! We actually received another demand for this improvement here.
Since the API we use is actually different from the regular one, we would need the Clickstudios team to change the RDM API as well. Our other client posted on their forum but I don't think it gained traction yet. I think it would help if you also posted on their forum about wanting this in the RDM API. Our contact at Clickstudios told us they'd contact us once it's available in one of their releases.
Regards,
Hubert Mireault
Hubert, sorry I think some clarification is needed on some of this.
We use passwordstate with 2fa/MFA via DUO, it works appropriately so i'm not sure where the issue is for this other user.
What we are asking for is not referring to MFA/2FA prompts for authentication to a Passwordstate Vault. All we are asking for is to add the functionality for pulling an OTP code from a stored credential entry (almost exactly like RDM does it for its internal vault). The exact same workflow you use now for getting a password from passwordstate would be in place, the only difference would be for anywhere in RDM where you can specify "One time password settings" you would need to be able to run through the password selection dialog for passwordstate then any time an OTP is requested for that password entry you would query one of the URIs mentioned above.
Your point about using another API for Passwordstate does seem strange to me but never the less I have advised passwordstate to read this community post to help me understand what needs to be done.
If it helps, a phone call / screen share may help clarify.
--
Eric Sakariasen
Connetic IT Support
Sorry, I indeed misunderstood what you were asking for. This makes a lot of sense, thanks for the explanation. I've opened an internal improvement ticket.
It's interesting that DUO seems to work properly, we'll have to revisit our improvement ticket on the other thread then, I don't recall us specifically implementing it.
Regards,
Hubert Mireault
Hubert - The APIs work around the authentication (2fa) workflow for passwordstate so there's no way implementing 2fa had any breaking effect directly. The user likely made some other change which broke their ability to connect (I'm not saying I've ever done this and blamed RDM .... Ok yeah that's what I'm saying, so yeah totally something that's doable)
Thanks again for the support, excited to finally see this feature makes its way for us..
--
Eric Sakariasen
Connetic IT Support
Hubert, curious if the PasswordState OTP adaption has had any traction?
--
Eric Sakariasen
Connetic IT Support
Hello,
This is assigned to a dev and is in our pipeline, but it may take a little while to get done since we're currently focusing on stability for our upcoming 2021.1 release. Hopefully we'll be able to add this in an early update to 2021.1.
Regards,
Hubert Mireault
Hubert, thank you for the update!
--
Eric Sakariasen
Connetic IT Support
Hubert et al,
Has any traction been made on this feature request?
Thanks in advance!
--
Eric Sakariasen
Connetic IT Support
Hello,
This is still in our plans, we've had to put our efforts on improving stability and performance in RDM 2021.1, hence why this hasn't been done yet.
Regards,
Hubert Mireault
Hi all,
Any updates on this integration?
Thanks in advance!
--
Eric Sakariasen
Connetic IT Support
Hello,
We'll hopefully have this done for RDM 2021.2 (planned release this autumn). We've had a lot of things to sort out for this version so it pushed back improvements like this a bit, but it's still on our roadmap.
Regards,
Hubert Mireault
Would you update this forum post when the feature has been pushed to beta, I'd be happy to test its functionality for you.
Thanks in advance!
--
Eric Sakariasen
Connetic IT Support
Hello,
We will definitely be posting to this thread once it's available. As a note, this is currently assigned to a developer and we are hoping to be able to work on this soon.
Regards,
Hubert Mireault
You and your team is awesome, thanks for the hard work!
--
Eric Sakariasen
Connetic IT Support
Hi all,
Is there a status on the implementation of this?
Thanks,
Eric
--
Eric Sakariasen
Connetic IT Support
Hello,
We are hoping to have this for our next major release early next year (January/February), but it's possible it might come in a subsequent minor update.
Regards,
Hubert Mireault
Hello,
We've added support for One time passwords in Passwordstate. For this to work, you'll need to enable the option "Allow OTP retrieval" in the Advanced tab.
It will be available in version 2022.1.
Regards
Jonathan Del Signore
Nice!! I cant want to try it in an upcoming beta! Thanks for getting this implemented.
--
Eric Sakariasen
Connetic IT Support
Where should I post problems using this new feature? Is it here or in Beta or in bugs?
Thanks
--
Eric Sakariasen
Connetic IT Support
@ejs,
Please open a new thread in https://forum.devolutions.net/forums/1/remote-desktop-manager--support and we will help you with your issue. Don't forget to include the version of RDM that you are currently running.
Best regards,
Jeff Dagenais