topic Re: Looking for OTP support solution for cortex xsoar system in Cortex XSOAR Discussions

Looking for OTP support solution for cortex xsoar system

Duxgbk — Tue, 07 Jan 2025 15:45:52 GMT

Hi Guys,

I would like to express my interest in implementing a One-Time Password (OTP) authentication mechanism for the Cortex XSOAR login process to enhance security.
My specific requirements are:
- The OTP solution must be deployed on-premise to ensure full control over authentication.
- It should have an application that integrates seamlessly with Cortex XSOAR, preferably available in the Marketplace.

However, I have not yet identified a suitable solution that meets these criteria. I would greatly appreciate your recommendations or guidance on potential options that could address this need.

Re: Looking for OTP support solution for cortex xsoar system

JStephan — Wed, 08 Jan 2025 08:49:39 GMT

Hey there,

depends on if you are asking for v6 or v8

on v6 we support DUO for second factor:

Re: Looking for OTP support solution for cortex xsoar system

Duxgbk — Wed, 08 Jan 2025 09:51:39 GMT

Hi JStephan,
I wanted to thank you for your assistance regarding the issue I encountered. I am currently using Cortex XSOAR version 6.12 for our operations. While Duo has provided excellent support for multi-factor authentication (MFA), I am looking for a solution that can be deployed on-premise to meet specific organizational needs.
My key requirements for the solution are as follows:
- On-Premise Deployment: The solution must be deployable within our infrastructure to ensure full control over data and compliance with internal security policies.
- Similar Features to Duo: The solution should provide capabilities equivalent to Duo, such as robust MFA, seamless integration, and a user-friendly authentication experience.

Re: Looking for OTP support solution for cortex xsoar system

JStephan — Thu, 09 Jan 2025 08:31:02 GMT

Okay I see,

I am afraid that DUO is the only one we have seen any documentation about,

rumors have it that some people have managed to use KeyCloak to do some central authentication where the second factor is also handled there, but thats all I can say, sorry ¯\_(ツ)_/¯

Re: Looking for OTP support solution for cortex xsoar system

Duxgbk — Fri, 10 Jan 2025 09:42:29 GMT

Hi JStephan,
I’m planning to build an integration app for an on-premises OTP solution, such as PrivacyIDEA, to implement two-factor authentication (2FA) for login. However, I couldn’t find any documentation or relevant code snippets on how to insert the 2FA mechanism during the login process, similar to how DUO works.

I tried searching for DUO’s implementation code in Demisto’s GitHub repository but couldn’t locate anything useful. Do you have any information or insights about the mechanism for inserting 2FA during the login process?