authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client

Sean 3595059add feat: Additional checks if login is valid vor 2 Jahren
.vscode f34f4fc42f Initial commit vor 4 Jahren
ocma 3595059add feat: Additional checks if login is valid vor 2 Jahren
tests 0be3489ccb Add docs to tests package vor 3 Jahren
.drone.yml f829a8ac5c ci: use poetry in a container 3.11 vor 3 Jahren
.gitignore f34f4fc42f Initial commit vor 4 Jahren
.mypy.ini 551f90a191 chore: fix mypy exception and add pylint vor 3 Jahren
.pre-commit-config.yaml c75355de2a chore: Update dependencies vor 3 Jahren
.pylintrc c12ab0523a Fix pylint and pydocstyle issues vor 3 Jahren
.releaserc b0a23f58fb chore: update release config vor 3 Jahren
Dockerfile 7f6bbef2ed chore: docker use python 3.11 vor 3 Jahren
license.md 491d8b6ade Add license vor 4 Jahren
poetry.lock c75355de2a chore: Update dependencies vor 3 Jahren
pyproject.toml 293aac0f4e chore: fix dep solving vor 3 Jahren
readme.md 1fb95c6f41 Add upgrade instruction vor 4 Jahren
renovate.json 6fd1220a5c Remove lock file maintanance vor 3 Jahren

readme.md

Openconnect MS-Auth

This package allows you to authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client.

It uses selenium to open the login webpage and fill in the form details. At the end, it fetches the correct VPN HOST and the Cisco AnyConnect webvpn cookie.

Installation for CLI usage

Simply run pip install --upgrade git+https://git.snas.black-burn.ch/FHNW/openconnect-ms-auth to install the package globally. Then the "ocma" command should be available. Try it out by typing ocma -h.

Example CLI usage

Replace [username] and [password] with your own information. If you have your account secured with a TOTP MFA, provide the -m flag with the TOTP secret as the value.

Example of a TOTP url: otpauth://totp/FHNW%3Aelon.musk%40students.fhnw.ch?secret=NBSWY3DPEB3W64TMMQ&issuer=Microsoft The secret in this case would be NBSWY3DPEB3W64TMMQ. This needs to be provided as an input.

eval $( ocma -u [username] -p [password] -m [mfa_secret] --print-to-stdout );
[ -n $VPN_COOKIE ] && echo $VPN_COOKIE | sudo openconnect --cookie-on-stdin $VPN_HOST

Example usage in a Python project

Add with poetry: poetry add git+https://git.snas.black-burn.ch/FHNW/openconnect-ms-auth

from ocma import connect

connect.login(
    username="username",
    password="password",
    mfa_secret="mfa_secret"
)