Re: [Fed-Talk] Support for CAC authentication with Microsoft Teams
Re: [Fed-Talk] Support for CAC authentication with Microsoft Teams
- Subject: Re: [Fed-Talk] Support for CAC authentication with Microsoft Teams
- From: Ken Hornstein via Fed-talk <email@hidden>
- Date: Wed, 13 Oct 2021 19:48:18 -0400
>I’ve found two issues with connecting to Teams (resolved with help
>from the DOD CAE group):
Damn, dude, there's some kind of secret DOD Mac support group?? I HAD NO
IDEA! And neither did anyone else at my organization either, it seems.
>The first is the certificate prompt with no
>certificates, which Ken’s app solves. You can also try to solve it
>by creating a identity preference for *.deas.mil using your PIV cert.
So, a couple of from an agency that shall remain nameless also sent
that to me privately. But ... I have a question to those people. What
version of MacOS X are you on? I ask because Teams does _not_ have
the Smartcard entitlement (com.apple.security.smartcard) but it is
enrolled in the hardended runtime environment. In theory, that should
make smartcards not work on Catalina or later (People on Catalina and
Big Sur told me that cac4teams works; that is because I strip the
hardened runtime environment from copy of the Teams executable that
the cac4teams shell script makes).
>The second is that once logged in, it will go to a screen saying that
>something went wrong and you need to restart. That loop is an issue
>creating your profile in Teams 1.4 and better. Installing an older Teams
>(1.3.00.24758 or earlier will work) and then logging in will properly
>create the profile. Then you can update to the latest Teams and it will
>work.
Oh, interesting, that explains some of the problems people saw (but
I couldn't debug). But by "profile" do you mean the identity cache
stored in your Keychain?
--Ken
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden