FAQ · General
What is not supported yet?
This list says what the service does not do in this version, so you do not waste time looking. The alternatives shown work today.
Is there an approver app for iPhone?
No. Phone approval exists only for Android 14 or later. With an iPhone, use a passkey: the iPhone stores passkeys and can use them on the computer through the system's QR code.
Can I get codes by SMS or voice call?
No. SMS and voice are not offered, because they are easy to intercept and redirect. Use a passkey, phone approval or an authenticator app (six-digit codes).
Is there protected sign-in for macOS or Linux?
Not yet. Computer sign-in protection exists only for Windows today. Linux sign-in with a second factor (console, SSH and sudo) is in development; see Linux sign-in. macOS comes later. Until then, on macOS and Linux, web applications and the VPN stay protected by the other methods.
Does privileged access support RDP?
Not yet. Privileged access offers recorded SSH and SFTP sessions and credential checkout today. Recorded remote desktop (RDP) sessions in the browser, where the gateway enters the Windows password for you and never shows it, are in development and are not available in this version. Approval at connection time is not available either.
Can privileged access reach databases or give secrets to applications?
Not yet. Recorded PostgreSQL sessions through the gateway are in development, with MySQL/MariaDB and SQL Server later; see Recorded database sessions. Application secrets for applications and CI pipelines are also in development; see Application secrets.
Does the Edge appliance do RADIUS or directory connection?
No. The appliance runs only privileged access. RADIUS and the directory connector run from the central service.
Which RADIUS methods are missing?
CHAP, MS-CHAP, EAP (certificate-based 802.1X), OCRA, Change of Authorization (CoA) and Disconnect. Use PAP with a code or phone approval.
Anything else?
- Service emails are sent in Portuguese only.
- Third-party request decisions (intents API) are not evaluated by the access policy.
If you need one of these features, tell your provider: it helps set priorities.
Was this page helpful?
Thank you. Your answer stays in this browser; nothing is sent.
Sorry about that. Try:
- searching for the exact text of the message or the error code
- the error code index
- asking your organization's administrator