Overview
When using NetScaler AAA with nFactor authentication, all form fields are typically required for the authentication process. However, there are special cases where a field must remain empty for example push-based authentication via OneSpan or other Solutions:
There are two scenarios:
- If a user enters a One-Time Passcode (OTP), OneSpan will validate it as expected.
- If the passcode field is left empty, OneSpan automatically triggers a push notification to the user's registered device.
But when the user leaves the passcode field empty and clicks "Submit", a message is displayed, preventing the form from submitting.
Requirements
- NetScaler 14.1 (tested with 14.1 43.50)
- 13.1 can also work
- AAA vServer with nFactor Flow
- RfWebUI theme
Configuration
A deeper look into the authentication process reveals that the file nsg-setclient.js, located at /var/netscaler/logon/LogonPoint/plugins/ns-gateway, is responsible for displaying this message box.
To resolve this, search the file for the string "enter_passcode_msg" and comment out the entire IF statement, like this:
You can use /* */ to comment out the section, or simply delete it if it's no longer needed.
This will also work with an empty Username and Password—just refer to the previous IF statement for comparison.
Keep in mind: after every NetScaler update, these changes must be re-validated! Alternatively, you can try rewriting the changes in a way that doesn't require directly editing the file.