[
https://issues.apache.org/jira/browse/GUACAMOLE-742?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16831168#comment-16831168
]
Leigh Bennett commented on GUACAMOLE-742:
-----------------------------------------
"The Guacamole RADIUS extension knows how to handle challenge/response
situations."
If that's the case then the Guacamole Radius extension should be able to
determine it should wait for the user to press 'Approve' on their mobile device
and in the meantime display a message saying 'please wait' or 'check your
mobile device'.
"When Guacamole prompts users for credentials, and users enter their
credentials, there should be some sort of feedback which lets users see that
their credentials have been submitted and are being processed."
If you've added some sort of message to say 'please wait' regardless of the
auth mechanism used then I'm interested to see how you handle the code entry
text box for those MFA users that have opted for the code via text option once
they've entered their credentials.
If what I'm thinking you've done is correct, then when any auth option other
than Radius is used the user probably won't see any message as the auth will
have happened quick enough for it to not be seen.
> Display feedback while waiting for login
> ----------------------------------------
>
> Key: GUACAMOLE-742
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-742
> Project: Guacamole
> Issue Type: Improvement
> Components: guacamole
> Reporter: Leigh Bennett
> Assignee: Michael Jumper
> Priority: Trivial
> Fix For: 1.2.0
>
>
> This request is more of a 'nice to have' than anything else. Just something
> I noticed myself and a couple of users have mentioned but after we enter our
> login credentials and hit enter the screen just sits and waits. For users
> that have opted for a code via text its not a problem as we are shown a nice
> little box to enter the code whilst we wait for the text message. This of
> course indicates to the user to that their credentials have been accepted so
> they wait. But for those users that have the push notification app they're
> not actually told anything is happening, so they end up retrying their
> credentials or refreshing the page until they eventually realise their phone
> is going nuts with auth pushes. Eventually they get in of course.
> It would be really nice to have a message that simply displays 'please wait'
> or 'please wait for secondary authentication'. Something along those lines,
> or if its not too much trouble to detect the type of auth then something that
> says 'please check your phone/device' to make it a bit more obvious for these
> poor users using MFA.
> Thank you!
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
