authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client

Sean 37c88f8ef9 Python usage and background info		преди 4 години
.vscode	f34f4fc42f Initial commit	преди 4 години
ocma	f34f4fc42f Initial commit	преди 4 години
tests	f34f4fc42f Initial commit	преди 4 години
.drone.yml	f34f4fc42f Initial commit	преди 4 години
.gitignore	f34f4fc42f Initial commit	преди 4 години
.mypy.ini	f34f4fc42f Initial commit	преди 4 години
.pre-commit-config.yaml	f34f4fc42f Initial commit	преди 4 години
Dockerfile	f34f4fc42f Initial commit	преди 4 години
poetry.lock	f34f4fc42f Initial commit	преди 4 години
pyproject.toml	f34f4fc42f Initial commit	преди 4 години
readme.md	37c88f8ef9 Python usage and background info	преди 4 години

Openconnect MS-Auth

This package allows you to authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client.

It uses selenium to open the login webpage and fill in the form details. At the end, it fetches the correct VPN HOST and the Cisco AnyConnect webvpn cookie.

Example CLI usage

Replace [username] and [password] with your own information. If you have your account secured with a TOTP MFA, provide the -m flag with the TOTP secret as the value.

Example of a TOTP url: otpauth://totp/FHNW%3Aelon.musk%40students.fhnw.ch?secret=NBSWY3DPEB3W64TMMQ&issuer=Microsoft The secret in this case would be NBSWY3DPEB3W64TMMQ. This needs to be provided as an input.

eval $( python ocma/cli.py -u [username] -p [password] -m [mfa_secret] --print-to-stdout );
[ -n $VPN_COOKIE ] && echo $VPN_COOKIE | sudo openconnect --cookie-on-stdin $VPN_HOST

Example usage Python

Add with poetry: poetry add git+https://git.snas.black-burn.ch/FHNW/openconnect-ms-auth

from ocma import connect

connect.login(
    username="username",
    password="password",
    mfa_secret="mfa_secret"
)

readme.md

Openconnect MS-Auth

Example CLI usage

Example usage Python