Harden NTLM authentication and restore SGU profiles

src/SGU.CredentialProvider/ProviderSettings.cs

@@ -10,7 +10,7 @@ internal sealed class ProviderSettings
 
     public string DomainNetbios { get; init; } = "LCI";
 
-    public int TimeoutSeconds { get; init; } = 35;
+    public int TimeoutSeconds { get; init; } = 90;
 
     public string ClientCertificateThumbprint { get; init; } = string.Empty;
 
@@ -54,7 +54,7 @@ internal sealed class ProviderSettings
             throw new InvalidOperationException("BrokerEndpoint must target /v1/authenticate.");
         }
 
-        if (string.IsNullOrWhiteSpace(DomainNetbios) || TimeoutSeconds is < 2 or > 60)
+        if (string.IsNullOrWhiteSpace(DomainNetbios) || TimeoutSeconds is < 2 or > 90)
         {
             throw new InvalidOperationException("DomainNetbios or TimeoutSeconds is invalid.");
         }

src/SGU.CredentialProvider/ProviderTileIcon.cs

@@ -14,7 +14,10 @@ internal static class ProviderTileIcon
         using Graphics graphics = Graphics.FromImage(bitmap);
         graphics.SmoothingMode = SmoothingMode.AntiAlias;
         graphics.PixelOffsetMode = PixelOffsetMode.HighQuality;
-        graphics.Clear(Color.FromArgb(0, 83, 155));
+        graphics.Clear(Color.Transparent);
+
+        using SolidBrush background = new(Color.FromArgb(0, 83, 155));
+        graphics.FillEllipse(background, 1, 1, Size - 2, Size - 2);
 
         using Pen key = new(Color.White, 5.5f)
         {

src/SGU.CredentialProvider/settings.example.json

@@ -1,7 +1,7 @@
 {
   "BrokerEndpoint": "https://sgu-auth.lci.lasalle.mx:8443/v1/authenticate",
   "DomainNetbios": "LCI",
-  "TimeoutSeconds": 35,
+  "TimeoutSeconds": 90,
   "ClientCertificateThumbprint": "0000000000000000000000000000000000000000",
   "ServerCertificateThumbprint": "0000000000000000000000000000000000000000"
 }