Does okta support MS-CHAPv2 pritocol or capble? Skip to main content
https://support.okta.com/help/answers?id=9062a000000bmoaqai&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Spiros BliasSpiros Blias 

Does okta support MS-CHAPv2 pritocol or capble?

Bogdan AndrisanBogdan Andrisan (Okta, Inc.)
Hello,

The MSCHAPv2 protocol is not yet supported and although it is in the works, we do not have an ETA of its release.

Thank you,
Bogdan Andrisan.
Wils DawsonWils Dawson (Okta, Inc.)
Hi Spiros,

Are you asking about OMM's WiFi profiles? Or something else? Just want to make sure we get you the correct information. 

If you are talking about OMM WiFi profiles, we have an EA feature which will allow you to use PEAP MS-CHAPv2 based connections. See this guide for requirements and caveats: https://help.okta.com/en/prod/Content/Topics/Mobile/Okta_Mobile_WiFi_Profiles.htm

Thanks,
Wils
Spiros BliasSpiros Blias
Hi Wils

No this is required for ISE radius to MFA radius proxy communication to allow users to reset their passwords upon expiry.
The MFA server has to be MSCHAPv2 capable.
 
Seth RetigSeth Retig
Any update on this being supported?  This causes quite some confusion for users connecting to our VPN with expired credentials.