Radius authentication using remote challenge

Author
robinct
Bronze Member
  • Total Posts : 21
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/07/24 23:57:54
  • Status: offline
2020/03/26 08:26:25 (permalink) 6.0
0

Radius authentication using remote challenge

I'm working on RADIUS authentication together with MS NPS and Azure MFA.
So far, it works great when using "app notification". As in, a simple confirmation button in the app.
 
What I'm trying to achieve right now is to use the verification code from the app instead.
 
When I use "diagnose test authserver radius <server> pap user password, I receive a prompt "Enter Your Microsoft verification code", where I enter the code and I'm successfully authenticated.
 
However, when I try to use the same user logging into the firewall itself, it fails.
 
Via ssh, I get a question, "Remote Token" and after inputting a correct code, the connection is closed.
Via web, I get a second token input in the login form, input a correct code, and after a short while, I get authentication failed.
#1

1 Reply Related Threads

    robinct
    Bronze Member
    • Total Posts : 21
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/07/24 23:57:54
    • Status: offline
    Re: Radius authentication using remote challenge 2020/03/27 05:42:07 (permalink)
    0
    Never mind this. This was our internal NPS extension behaving differently when the authorization request came from a challenge request instead of the regular accept request.
    #2
    Jump to:
    © 2020 APG vNext Commercial Version 5.5