ray02

Thanks for the detailed explanation. I can certainly understand the complexity in getting that to work.

Our biggest concern is having a non MFA account able to access the database that holds server names, IPs, passwords and other sensitive information. While we can technically create a user on demand and enable/disable the account it does pose a much higher risk to our data than we would like, especially if we have to create multiple accounts or share an account with different team members this becomes more and more of a security risk as it requires manual steps to ensure security is enforced.

I'm sure you'll implement this when it is cross platform native, but if there is any way to get a separate PS7 module that would enhance the security posture of it that would be greatly appreciated!

Cheers,

Ray

As far as I understand PowerShell 7 supports interactive windows with no problems.

I use PowerShell 7 to connect to Exchange Online, Azure, AAD, Teams on a daily basis with MFA windows and interactive support. To my knowledge there is nothing stopping the MFA from working.

Failing that there is also the option to use the device login option which allows you to log into your browser and have it send back an approval token. I'm not a developer but it's how Devolutions works for authenticating to the Devolutions login.

Cheers,

Ray

Is there a plan to add this functionality?

Adding a user to the database isn't an option for security reasons.

Cheers

Ray

Thanks Jonathon, great to hear it's on the roadmap!

I gave it a shot but was unable to figure out how to get the custom script to run.

I tried something along the lines of:

document.getElementById('i0116').value="$USERNAME$"

but nothing seems to be running, is there some examples on how to setup Custom Scripts. I think i've got the javascript working (when using Chromes dev tools)

Cheers,

Ray

Hi Jeff,

I've been using that for a little bit and it does some of what's needed, but there are 3 pages for O365 login.

Username - Submit

Password - Submit

OTP - Submit

I would like to pass each of these into the login all from a Keeper Vault credential.

The linked thread only does

Username - Submit

Password

At this point you have to Submit the Password by clicking which isn't a big deal, but then having to find the OTP and enter that in is a little more frustrating.

Ideally there would be an option to have multiple button presses and a control ID for OTP field

I hope that makes sense.

Cheers,

Ray

The feature works really well, great help to reduce switching between Apps.

Is it possible to get the OTP as a variable and/or available on sessions that have the credential linked to them?

Thanks

Ray

Is there a way to handle multiple buttons on login to a website?

Connecting to Office 365 asks for Username, press button, Password, press button, OTP, press button.

At the moment RDM handles the username, button and password, but it would be nice to handle the entire process. More and more sites seem to be using this type of authentication separating the different fields to different forms.

Cheers,

Ray

Hey Jonathan, that's awesome news, can't wait to try it out!

That sounds perfect, thanks Hubert!

Sorry, didn't explain that well did I!

I tried the RDM OTP feature and couldn't get that working for Azure AD MFA tokens. So I was unable to test the current inbuilt RDM OTP feature.

In saying that, it would still be more beneficial to be able to use Keeper as we have a few hundred MFA enabled accounts that would be good to simplify our experience.

Ideal state would be:

Open a link to Azure portal which pulls out the Username, Password and MFA code and logs us into the portal without any requirement to go outside RDM.

hope that makes more sense.

Had a bit of a look and the inbuilt OTP doesn't look like it would work for Azure AD credentials, so having that ability would be amazing if it can be added to Keeper, I'd imagine it would be a useful feature for most credential managers.

Cheers,

Ray

Thanks for that, it sounds like that would suit our needs well.

I haven't tried the RDM OTP, i'll give it a shot for now to see how it goes but all our credentials are in keeper with the OTP as well so it would certainly be beneficial to have that single source of truth.

Cheers,

Ray

Hi Hubert,

Currently we are testing the Beta, 2021.1.19.0 BETA. In 2021.1.18 there was a option to select OTP from Keeper, in .19 it disappeared so I wasn't sure if that was a mistaken feature that isn't available or something that is being worked on.

Cheers,

Ray

We use Keeper and the integration is realy helping us.

We manage a lot of Microsoft systems and as such a lot of the accounts we use have requirements for MFA/OTP. It would be amazing if we could have the OTP feature included into Keeper and have to as a way to log into Microsoft Portals within RDM.

Cheers,

Ray

This feature is really important to us. We have an Azure SQL database with Active Directory integration. It is the only method for accessing the data.

We would really like to be able to use RDM for remote support on the mobile devices in case of serious issues, but at the moment we have no way to do so.

Is there a way around this, or any plans to add this functionality?