Cornelius Kölbel

Multiple policies with the same action - overwrite by priority

1

**Is your feature request related to a problem? Please describe.** In certain cases policy exceptions are difficult to handle logically. If e.g. users should usually be allowed to do ``passthru=userstore``,...

This is a sequel of #1495 Verify how we would handle a realm? In which way (at all) should an administrator be allowed to view the config of a resolver...

Central notification system for privacyIDEA news

4

When a new update comes, this update also contains a "READ_BEFORE_UPDATE" file. However, the admin running privacyIDEA with Ubuntu or CentOS packages will not be easily able to read this...

Add non-deleteable option for smartphone apps with privacyIDEA Authenticator

2

Also see https://github.com/privacyidea/privacyidea-authenticator/issues/34 In large setups it can be annoying for helpdesk and administrators if users delete their smartphone token. We could add a policy and a flag to the...

Todo list

2

We could define todo list of actions a user or administrator must perform. The todo list could contain links to certain places in the Web UI. If the administrator has...

new action (inbox / todo) in user notification

1

The user notification handler could have a new action. Users in privacyIDEA could have inboxes in privacyIDEA. These inboxes can contain any information. E.g. an administrator could be informed about...

Send PUSH QR Code Image via UserNotification Handler

1

**Is your feature request related to a problem? Please describe.** I would like to send the QR Code of the Push-Token enrollment via the UserNotification handler. **Describe the solution you'd...

**Is your feature request related to a problem? Please describe.** See https://community.privacyidea.org/t/can-i-implement-user-choice-that-radius-response-with-pi/6888/2 **Describe the solution you'd like** Such a functionality could be created by a tokentype "choice". The challenge is...

**Is your feature request related to a problem? Please describe.** Using the policy `otppin=userstore` and attacker could block an account. **Describe the solution you'd like** Top requirement: At some point...

Brute force mitigation

1

# Situation CC: 174609 We are trying to add an **attack mitigation**. We assume that the first factor (static password like the LDAP password) is compromized. This is unknown. The...