{"action":"opened","issue":{"url":"https://api.github.com/repos/privacyidea/privacyidea/issues/428","repository_url":"https://api.github.com/repos/privacyidea/privacyidea","labels_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/428/labels{/name}","comments_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/428/comments","events_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/428/events","html_url":"https://github.com/privacyidea/privacyidea/issues/428","id":160839017,"number":428,"title":"Token desyncs with many shared services","user":{"login":"Gaegamel","id":2140965,"avatar_url":"https://avatars.githubusercontent.com/u/2140965?v=3","gravatar_id":"","url":"https://api.github.com/users/Gaegamel","html_url":"https://github.com/Gaegamel","followers_url":"https://api.github.com/users/Gaegamel/followers","following_url":"https://api.github.com/users/Gaegamel/following{/other_user}","gists_url":"https://api.github.com/users/Gaegamel/gists{/gist_id}","starred_url":"https://api.github.com/users/Gaegamel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Gaegamel/subscriptions","organizations_url":"https://api.github.com/users/Gaegamel/orgs","repos_url":"https://api.github.com/users/Gaegamel/repos","events_url":"https://api.github.com/users/Gaegamel/events{/privacy}","received_events_url":"https://api.github.com/users/Gaegamel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-06-17T08:40:03Z","updated_at":"2016-06-17T08:40:03Z","closed_at":null,"body":"Hi,\r\n\r\n**Infrastructure - more or less**\r\nI would like to make use of privacyIDEA on my personal setup. It consists of two (three with privacyIDEA) services. Both support HOTP.\r\n\r\nIn order to separate both services and their OTPs from one another (I am thinking about opening one of the services to the public or at least a closed community) and to make management easier, I created two realms - realm A and realm B.\r\n\r\n**Problem**\r\nI want to use both services with my personal HOTP key, so I can login to both realms without needing a second key. But this arose a problem: I had to register two separate IDs for one token. They both have separate counters, which do not sync, because they do not know each other. Since I log in more frequently to realm A, the token will eventually lose sync with realm B. This happens from time to time.\r\n\r\n**Question**\r\nIs there any way (separating the realms for improved security) in order to sync all token-IDs, which have the same underlying shared secret?\r\n\r\n**Remarks**\r\nI suppose, greater scale organisations and setups might also profit from this solution, if each employee is only assigned one key and it's not required to possess one key for each service. of course, this could be toggled by a guideline or alike.\r\n\r\nIf you have further questions or need clarification, I would be glad to help you."}}
{"actor":{"display_login":"Gaegamel"}}