Microsoft Authenticator 2-digit number

[kowach]

Hi,

after much struggle I managed to run openconnect-sso.

I enter TOTP 6-digit secret from Microsoft Authenticator app and after that app asks me "Enter the number show to sign in" (it expects two digit number), but nothing appears in console?

I only see js: Uncaught TypeError: Cannot read properties of undefined (reading 'type'). I'm not sure if it's related to this problem or openconnect-sso does not know how to show those numbers?

Versions:
openconnect-sso 0.8.1
OpenConnect version v9.12-3
Python 3.12.11
Ubuntu Mate 25.04

Running with this flag (because of "Unable to initialize SkSurface" error):
QTWEBENGINE_CHROMIUM_FLAGS="--disable-gpu" openconnect-sso --user me@my.com --server my.company

[kowyo]

Hi @kowach, have you tuned the configuration? I suppose it can simply use TOTP 6-digit and bypass the two-digit section. You can test my configuration here: https://github.com/kowyo/openconnect-lite#configuration

[kowach]

It stuck on: Waiting for message from browser process [openconnect_sso.browser.browser]

When I use Cisco secure client it redirects me to Microsoft authentication process which is:

1. Pick account [I have to click on first (my) account]
2. Enter password [I have to enter account password "xxxxxxxxxxxxx"]
3. Check Auth app and enter code "xx" [I skip this with with click on -> I can't use auth app right now]
4. Choose (6-digit) code form app [I click on Choose code from app and after that I enter TOTP 6-digit code and submit it]
5. Stay signed in [Choose Yes or No]
6. Banner [Click on Accept]

I'm not sure that this toml configuration follows all these steps because I don't see how password from step 2. is entered into the form?

[kowyo]

The toml configuration works by selecting the element in your webpage, it does not actually work step by step. In my case, I open a browser and enter the server address, use F12 and see the actual element behind my provider. Hope that can help!

Also, without the automation selection provided by openconnect-sso (you can disable by remove the [auto_fill_rules] section), can you have it worked?

[kowach]

So it triggers action when selector is found on page. Problem is I don't know which selector is behind that pages because I can't inspect that window (window is some wrapped browser in Cisco secure client application).

The default rules do not work.

Can openconnect-sso write html of opened pages to some local file? I could modify the source code but I don't know where to look.

[kowyo]

So it triggers action when selector is found on page. Problem is I don't know which selector is behind that pages because I can't inspect that window (window is some wrapped browser in Cisco secure client application).

The default rules do not work.

Can openconnect-sso write html of opened pages to some local file? I could modify the source code but I don't know where to look.

You catched the point. In my company there is a web interface for the VPN so basically I can test it in my own browser first.

Can openconnect-sso write html of opened pages to some local file

Yes, but you need to change the code yourself, I have tried that before and asked AI for help, it was not difficult