Strong authentication for Adaxes API ?

Question

Hello

We are currently building HRIS automation capabilties over the Adaxes API and it works quite well.

The main issue we have is that Adaxes API works with simple username and password authentication. Which is unsage and against our zero password policy.

The web UI is authenticated with SAML currently, and that's perfect for us.

Regarding the REST API, is there a way to improve the security by moving to one of those option (sorted from the most prefered one to the least one):

• OAuth2 via the web UI
• Certificate Based Authentication
• Kerberos

Thanks

Answer 1

Hello,

Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Comments

That's a really bad news. Having the identity API supporting only weak authentication is a bit concerning…

---

oov to bad

---

Is this on the Adaxes roadmap? These days, companies fail audits for products that still use this security design.

---

Hello,

We are considering the possibility of using other authentication methods. However, the feature is still not on the roadmap and there is not ETA.