News for hackers. Stuff that matters.

A comment on Ask HN: What's the worst piece of software you use everyday?. Parent comment

Re:Ask HN: What's the worst piece of software you use everyday? by tsimionescu on Saturday July 11, 2020 @07:00PM (#23806920)
We have a very funny situation in our org, where AWS auth is setup using our MS domain, with app push-based MFA. However, the AWS MFA workflow seems to not know about push based notifications, so it asks for a verification code which can literally be anything. After you provide some code and click Verify, only then does it send the push notification, and the UI just freezes until you either accept the auth request or some timeout happens.

Not to mention, we actually have to provide the Domain password in the AWS UI, which seems to go against any kind of security I know...

[ Parent | on HN ]
Re:Ask HN: What's the worst piece of software you use everyday? by vladvasiliu on Sunday July 12, 2020 @03:48AM (#23809645)
If you already have an MS domain you could set up SAML login with ADFS (tried this, works fairly well) or AWS SSO if you have a managed AD in AWS (may not be available in your region). Also works very well with AzureAD as the provider, if you use that synced to your on-prem AD.
[ Parent | on HN ]