Cornelius Kölbel

Can the big IP only log parameters? Can't you log header information of the http request?

Oh. You are right. My bad! I should have studied this system better ;-)

If sbidy is right and the credentials of the service account are wrong, then you should see a failed ``auth`` request in the audit log. null

Yes, SMS and Email work the same. Either trigger with an admin and triggerchallenge or trigger by user with a PIN. But for the workflow they are completely the same.

One API request only searches a user in **one** realm. Read more about realms here: https://privacyidea.readthedocs.io/en/latest/configuration/realms.html To differentiate realms, there are different possibilities: **A) Have the application (or the user)...

You are right. SMS token and EMAIL Token *require* a trigger to be sent. Anyway, you could use triggerchallenge with other Token types like HOTP. Then the user would not...

With challenge response token privacyidea will trigger a challenge if the user provides the correct OTP PIN or password in the first authentication step. If your OTP PIN is empty,...

> The other case - a user has a challenge response token with a configured token pin - is not implemented yet. Because I have to alter the authentication page...

> OK, now I should catch the case if no admin account is provided but a challenge-OTP (Mail, SMS...) with a empty PIN in configured for the users. How do...

privacyIDEA needs to know the machine identifier, which could be the machine name. This could be sent via the user agent in the HTTP Header. If we put the machine...