Problem with Sign Up MFA

[jredondo18]

Hi!

When a user is going to register an authentication application, two options appear on the first screen: Register and Login.

If the user clicks on register, the registration process starts and key activation begins.

But if the user clicks on login, he/she accesses directly to the application, without previous registration.

Is there any way to remove the login button?

Regards!

[redhook62]

Hi, @jredondo18

Yes, you are on the default template.
This authorizes the user to bypass the MFA, however he will be reminded regularly that he must register.
As you can see here : Templates,
There is a set of templates that can address a large part of the cases that the administrator can evaluate.
If you want users to be forced to register without being able to bypass MFA, I think you should use the "Mixed" template, you can also look at the different possibilities again here: Templates.

regards

redhook

[jredondo18]

Thank you very much!

Another question, is it possible to modify the text in each box?

Thank you, best regards.

[redhook62]

Hi, @jredondo18

Yes, there are 2 ways to do it.

1. If your modifications are generic you can modify the resource files and post a "Pul Request", and if all this suits us it will be integrated into a build.

2. You can modify all the resource files concerning the UI (there is one set per language), for that refer here: Localization and follow the procedure.
   In this case you must continue to maintain your translations in the future. it is also possible to modify the emails sent as indicated in the same chapter.

regards

redhook

[jredondo18]

Hello, thank you for your reply,

Back to my first question. If I activate the "Mixed" template, now I see how the registration is mandatory, but I can not modify the options management. I don't want the user to access the options panel.

Is there any way to remove that option to the user?

Thanks again,

Regards!

[redhook62]

Hi @jredondo18

nothing could be simpler,
The models impose fixed choices in part.
The easiest way for you is to use the "Custom" template, you will be able to access all the options

regards

[jredondo18]

Hi,

I have selected the custom template, however, this again authorizes the user to bypass registration.

This is my global MFA configuration:

And now I see again the login button on the first registration step:

Regards!

[redhook62]

Hi, @jredondo18

Once you have defined your template in general settings (these apply to the user in general, regardless of authentication providers (TOTP, mail, Biometrics)).

So with the "Mixed" or "Custom" template you force users to register, they can't continue without going through this step.

Then, on each authentication provider, you will intervene to define a possibly specific behavior.
When registering the user, if the provider is not required, the user can continue without registering on this same provider.

So you must indicate that the TOTP provider is Required.

regards

redhook

[jredondo18]

Sorry, but I keep seeing the login button in the registration panel.

This is my configuration:

Is there something wrong? I have restarted the ADFS services, and cleared the browser cache.

Regards.

[redhook62]

Hi @jredondo18

We just checked your configuration on an ADFS 2019, no worries, it's exactly as we told you.

Now !

• What is your version of ADFS ?
• Do you have multiple servers ?
  -- If Yes ! did you open the firewalls as indicated in the documentation ?
• What is the storage mode (ADDS or SQL) ?

Thank you in advance for sending us this information.

regards

[jredondo18]

Hi!

What is your version of ADFS ?
ADFS 2012

Do you have multiple servers ?
No, and the firewalls is open

What is the storage mode (ADDS or SQL) ?
ADDS

Thanks!

Regards.

[redhook62]

Hi,

Ok, we reproduce your problem on ADFS 2012R2.
On the other hand, it is probably not an ADFS 2012, because the model is not compatible and especially Windows 2012 is not supported. can you tell us exactly what the ADFS version is (2012R2, 2016, 2019 or 2022) ?

regards

[jredondo18]

Hi,

Sorry, is ADFS 2012R2.

Regards.

[redhook62]

Hi,

new release version 3.1.2210.1. this will solve your problem.

regards

[jredondo18]

Hi @redhook62,

Thank you very much for your time,

The error has been corrected correctly!

When I access the MFA console, and select "MFA Providers" to disable the email and biometrics provider, I get the following error:

Do you know what it could be?

[redhook62]

Hi,

Yes, it's confirmed on ADFS 212r2 and 2016.
There is a problem with nugets packages (Microsoft does nonsense...)
We look in detail.

regards

[redhook62]

Ok, take the last build, everything is solved. 3.1.2210.1

[jredondo18]

Hi @redhook62,

I confirm that's correct.

Thank you for your time.

Regards!