Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cannot Login to ADT Pulse with Multi-Factor Authentication Enabled #51

Closed
kmnedd opened this issue Aug 25, 2021 · 69 comments
Closed

Cannot Login to ADT Pulse with Multi-Factor Authentication Enabled #51

kmnedd opened this issue Aug 25, 2021 · 69 comments
Labels
bug Something isn't working good first issue Good for newcomers

Comments

@kmnedd
Copy link

kmnedd commented Aug 25, 2021 •
edited
Loading

Hi Jacky,

ADT is in the process of requiring Multi-factor Authentication to log into the portal. My account was converted. My plugin no longer can access my account with just my login credentials. Is there a way to address this within the plugin?

The MFA process sends a code (email or sms) at the first log-in attempt once it has been enabled. You have to enter the code along with a preference for always allowing the device to be recognized. I did this via the browser on the device. No luck in helping the plugin connect.

Thanks, Kevin
@kmnedd kmnedd added the bug Something isn't working label Aug 25, 2021
@mrjackyliang
Copy link
Owner

Hi Kevin, can you tell me which version are you using?

@mrjackyliang
Copy link
Owner

And if you are able to, please send some screenshots over because I did not find any multi-factor authentication setting in the portal.

@kmnedd
Copy link
Author

kmnedd commented Aug 25, 2021 via email

@kmnedd
Copy link
Author

kmnedd commented Aug 25, 2021 via email

@mrjackyliang
Copy link
Owner

Oh darn. Multi-factor authentication would be pretty hard to do.

@mrjackyliang
Copy link
Owner

Are you able to create a new user in the web portal? And then login with that instead?

@kmnedd
Copy link
Author

kmnedd commented Aug 26, 2021 via email

@mrjackyliang
Copy link
Owner

Phew. I thought it was going to be the end of ADT Pulse

@mrjackyliang mrjackyliang added good first issue Good for newcomers and removed bug Something isn't working labels Aug 26, 2021
@gdavids57
Copy link

Kevin - can you explain how you managed to create a new user without enabling MFA. As soon as I created a new user in the ADT Pulse Portal, the process went to a screen in which I had to select a MFA method (email, sms or voice) to receive the confirmation code.

@kmnedd
Copy link
Author

kmnedd commented Aug 28, 2021 via email

@mrjackyliang
Copy link
Owner

Hey all,

Not sure if this works at all, but I noticed when I logged in on my non-2FA account and skipped force 2FA using the links below, it helped the plugin regain responsiveness.

https://portal.adtpulse.com/myhome/mfa/mfaSignIn.jsp?workflow=initialSetup&shouldForceMfaSetup=false

This was referenced Oct 2, 2021
Closed
Closed
@mrjackyliang mrjackyliang pinned this issue Oct 7, 2021
@mrjackyliang mrjackyliang added bug Something isn't working cantfix labels Oct 7, 2021
@mrjackyliang mrjackyliang mentioned this issue Oct 7, 2021
Closed
@mrjackyliang mrjackyliang changed the title ADT Pulse Multi-Factor Authentication Cannot Login to ADT Pulse with Multi-Factor Authentication Enabled Oct 7, 2021
@mrjackyliang mrjackyliang mentioned this issue Oct 8, 2021
Closed
@abolians
Copy link

abolians commented Oct 8, 2021

Has anyone had issues with their IP being blacklisted after multiple logins with the non 2FA account?

@abolians
Copy link

abolians commented Oct 8, 2021

ADT Pulse: Logging in...
ADT Pulse: Response path -> /myhome/21.0.0-354/access/signin.jsp
ADT Pulse: Response path matches -> true
ADT Pulse: Web portal version -> 21.0.0-354
ADT Pulse: Response path -> /myhome/21.0.0-354/access/signin.jsp
ADT Pulse: Response path matches -> false
ADT Pulse: Login failed.

@mrjackyliang
Copy link
Owner

mrjackyliang commented Oct 8, 2021 •
edited
Loading

Are you using ADT Control or ADT Pulse? Because the plugin takes a break if it sees that you try to login to your account unsuccessfully multiple times

@abolians
Copy link

abolians commented Oct 8, 2021 via email

@mrjackyliang
Copy link
Owner

Haha. It's super odd. After I did that a few times on the browser, it didn't ask me for a 2FA requirement anymore.

@Fergie2020
Copy link

Having no luck with everyone’s ideas on getting the plugin to work again. 2FA is asked on all devices not matter what. I tried adding a new username and still doesn’t work.

This sucks! By far my favorite plugin.

@mrjackyliang
Copy link
Owner

Having no luck with everyone’s ideas on getting the plugin to work again. 2FA is asked on all devices not matter what. I tried adding a new username and still doesn’t work.

This sucks! By far my favorite plugin.

Did you ever happen to try the URL multiple times? On an account that doesn't have 2FA

@mrjackyliang
Copy link
Owner

Wow took some time to debug the fingerprint and I got it working! The trick is to replace the %3D with =

@mrjackyliang
Copy link
Owner

v2.1.0 is now released. Instructions on how to obtain the fingerprint are inside the README.md file.

@jim-at-miramontes
Copy link

Has anyone had issues with their IP being blacklisted after multiple logins with the non 2FA account?

Yes -- I'm getting back a 429 Too Many Requests error from the backend. If I change my IP address with a VPN, I can get through. ADT tech support is extremely clueless about this, but I have a phone call scheduled on Nov 10 with a higher-level tech. I'll report back if/when I learn anything.

@kmnedd
Copy link
Author

kmnedd commented Nov 8, 2021 via email

@ibogost
Copy link

ibogost commented Nov 8, 2021 •
edited
Loading

Has anyone had issues with their IP being blacklisted after multiple logins with the non 2FA account?

Yes -- I'm getting back a 429 Too Many Requests error from the backend. If I change my IP address with a VPN, I can get through. ADT tech support is extremely clueless about this, but I have a phone call scheduled on Nov 10 with a higher-level tech. I'll report back if/when I learn anything.

Update the plugin; it should address this.

You'd probably be better off figuring out how to lease a new IP from your internet provider than dealing with ADT tech support, however. Sometimes unplugging your modem for a night or a day will do it, or else, downlink it to a different machine and reboot both.

ADT has patched up the holes making non 2FA accounts a non starter. You are better off using a 2FA account with the new release that allow you to input a fingerprint.

Right, but, users might still want to login to the Portal normally to manage it, without a VPN. It's possible ADT will lift its blocks after a period of time, but I'm not sure.

@jim-at-miramontes
Copy link

Has anyone had issues with their IP being blacklisted after multiple logins with the non 2FA account?

Yes -- I'm getting back a 429 Too Many Requests error from the backend. If I change my IP address with a VPN, I can get through. ADT tech support is extremely clueless about this, but I have a phone call scheduled on Nov 10 with a higher-level tech. I'll report back if/when I learn anything.

Update the plugin; it should address this.
FWIW, I'm running 2.1.1. This smells like a backend issue (ADT clumsily looking for and blocking hacking attempts), but I could easily be wrong.

@jim-at-miramontes jim-at-miramontes mentioned this issue Nov 8, 2021
Closed
@jim-at-miramontes
Copy link

Has anyone had issues with their IP being blacklisted after multiple logins with the non 2FA account?

Yes -- I'm getting back a 429 Too Many Requests error from the backend. If I change my IP address with a VPN, I can get through. ADT tech support is extremely clueless about this, but I have a phone call scheduled on Nov 10 with a higher-level tech. I'll report back if/when I learn anything.

Update the plugin; it should address this. FWIW, I'm running 2.1.1. This smells like a backend issue (ADT clumsily looking for and blocking hacking attempts), but I could easily be wrong.

I talked to ADT second-level support this morning, and got the expected cluelessness about the 429 issue -- something about "sometimes I have problems, but when I google the login link I can get in" -- ???

Anyway, the good news is that (of course) my 429 problem went away, and I was able to log in to the portal with my usual IP address. So I'm guessing that either there is a black list that gets cleared every N days, or there was some other issue that got cleared by some sort of ADT maintenance. Who knows...

Beyond that, the REALLY good news is that the fingerprint-based plugin method is now working for me, and my Pulse system is fully connected into homebridge. Yay / thanks, Jacky!

@mrjackyliang
Copy link
Owner

Has anyone had issues with their IP being blacklisted after multiple logins with the non 2FA account?

Yes -- I'm getting back a 429 Too Many Requests error from the backend. If I change my IP address with a VPN, I can get through. ADT tech support is extremely clueless about this, but I have a phone call scheduled on Nov 10 with a higher-level tech. I'll report back if/when I learn anything.

Calling ADT won't help since the platform is controlled by Alarm.com

@mrjackyliang
Copy link
Owner

mrjackyliang commented Nov 11, 2021 •
edited
Loading

Has anyone had issues with their IP being blacklisted after multiple logins with the non 2FA account?

Yes -- I'm getting back a 429 Too Many Requests error from the backend. If I change my IP address with a VPN, I can get through. ADT tech support is extremely clueless about this, but I have a phone call scheduled on Nov 10 with a higher-level tech. I'll report back if/when I learn anything.

Update the plugin; it should address this.

You'd probably be better off figuring out how to lease a new IP from your internet provider than dealing with ADT tech support, however. Sometimes unplugging your modem for a night or a day will do it, or else, downlink it to a different machine and reboot both.

ADT has patched up the holes making non 2FA accounts a non starter. You are better off using a 2FA account with the new release that allow you to input a fingerprint.

Right, but, users might still want to login to the Portal normally to manage it, without a VPN. It's possible ADT will lift its blocks after a period of time, but I'm not sure.

You can easily just call your internet service provider and have them do a release/renew of your DHCP address. It's usually what they call it when you want to change your IP address.

Normally the block will last about 30 mins or so.

@burtherman
Copy link

When I try to go to the portal signin page with developer tools open, I now just get "blocked" in the browser -- tried with both Chrome and Safari

@mreassassin
Copy link

I have the fingerprint. How do you obtain a version of the app that will allow you to use it in the configuration? Kevin Sent via iPhone
…

Can you help me find the fingerprint? I followed the readme but still not showing any fingerprint in dev tools.

@jastorino82
Copy link

Thanks for the great work on this! I just got my system up and running tonight. I’m worried about how long the browser scraped fingerprint is going to last. In my case, the pulse portal behavior for MFA is quite flaky. Sometimes if you login, go through MFA, then tell it to remember your device, logout, then login, it in fact doesn’t remember the device, and you have to get another code, and try to get it to remember the device again.

Anybody know how long the fingerprint lasts? Shame we can’t disable MFA or request ADT disable it

@kmnedd
Copy link
Author

kmnedd commented Jan 17, 2022 via email

@abolians
Copy link

abolians commented Jan 17, 2022 via email

@mrjackyliang
Copy link
Owner

When I try to go to the portal signin page with developer tools open, I now just get "blocked" in the browser -- tried with both Chrome and Safari

Please first disable the plugin, wait 30 minutes, and then try getting the fingerprint again. You are being blocked by ADT due to many failed loginss.

@mrjackyliang
Copy link
Owner

I have the fingerprint. How do you obtain a version of the app that will allow you to use it in the configuration? Kevin Sent via iPhone
…

Can you help me find the fingerprint? I followed the readme but still not showing any fingerprint in dev tools.

I fixed it already. Please check the updated docs.

@mrjackyliang
Copy link
Owner

Thanks for the great work on this! I just got my system up and running tonight. I’m worried about how long the browser scraped fingerprint is going to last. In my case, the pulse portal behavior for MFA is quite flaky. Sometimes if you login, go through MFA, then tell it to remember your device, logout, then login, it in fact doesn’t remember the device, and you have to get another code, and try to get it to remember the device again.

Anybody know how long the fingerprint lasts? Shame we can’t disable MFA or request ADT disable it

Been using the same fingerprint since I created it! Seems alright! Just make sure to not remove the Homebridge device off of the trusted devices in the ADT account.

@oneill2142
Copy link

Good Morning,

New homeowner and ADT installed coming into the house. Just getting up and running with Homekit and trying to get my ADT to connect to it. I have purchased the HOOBs and have several devices going through it, though I cannot seem to connect my ADT Pulse.

I have taken it as far as opening Dev Tools, Ensuring "Preserve Log" is on, entering "signin.jsp" in the box, logging in (which is a challenge as it randomly blocks this site and then you are out for 2 days), and then I click on the "signin.jsp" in the dev tools window that appears valid .... I then go to Headers and there is No FORM DATA option, nor can I find any reference to a fingerprint. What am I missing?

Thanks
oneill2142

@mrjackyliang
Copy link
Owner

Good Morning,

New homeowner and ADT installed coming into the house. Just getting up and running with Homekit and trying to get my ADT to connect to it. I have purchased the HOOBs and have several devices going through it, though I cannot seem to connect my ADT Pulse.

I have taken it as far as opening Dev Tools, Ensuring "Preserve Log" is on, entering "signin.jsp" in the box, logging in (which is a challenge as it randomly blocks this site and then you are out for 2 days), and then I click on the "signin.jsp" in the dev tools window that appears valid .... I then go to Headers and there is No FORM DATA option, nor can I find any reference to a fingerprint. What am I missing?

Thanks oneill2142

Did you just install ADT Pulse? Or did you install ADT Control?

@oneill2142
Copy link

Thank you. I have ADT Pulse installed

@mrjackyliang
Copy link
Owner

Thank you. I have ADT Pulse installed

Make sure you stop the plugin first, give it about 30 mins. Try retrieving the fingerprint, setting the configuration, and then restarting the plugin.

@oneill2142
Copy link

oneill2142 commented Jan 27, 2022 •
edited
Loading

Thank you I will. I have stopped the plug in and will wait. Wondering however how that will impact what I see for "fingerprint" when I am in dev tools. That is my biggest issue. I cannot find the fingerprint. If you have any advice it is appreciated.

@oneill2142
Copy link

Thank you again, I have stopped the plug in, waited 35 minutes, and have gone to Dev Tools to try and locate a fingerprint. I cannot seam to find the fingerprint in the Dev Tools after having been logged out of bridge in Hoobs. No FORM DATA exists and the word Fingerprint does not exist in the headers sections under the signin.jsp that I am able to locate. Thanks again!

@mrjackyliang
Copy link
Owner

@oneill2142 Please start a new issue and tell me step by step what you did. Thanks!

@mrjackyliang mrjackyliang unpinned this issue Dec 16, 2023
@github-actions GitHub Actions
Copy link

github-actions bot commented Feb 2, 2024

This issue is now locked and considered resolved due to inactivity.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Feb 2, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
bug Something isn't working good first issue Good for newcomers
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests