RADIUS SSO Returns "Unknown" Location in the Okta Verify Prompt
Last Updated:
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview
Okta Verify returns an "Unknown" location after enabling Multi-Factor Authentication (MFA) for RADIUS-based SSO by default. Related to Fortinet/FortiGate, this can be confusing.
Applies To
- Multi-Factor Authentication (MFA)
- RADIUS
- Fortinet/FortiGate VPN
Cause
This is expected behavior as RADIUS does not return this value by default.
Solution
- Find the RADIUS application for which to enable this feature by navigating to Admin Console > Applications. Once found, click on it, and the configuration view should open.
- Navigate to the Sign On tab and scroll down to locate the Advanced RADIUS Settings section towards the bottom of the page. Click Edit.
- Select Report Client IP and click Save.
- Choose the RADIUS attribute that the RADIUS-enabled system uses to pass the client IP address. If it is not configured or not sure what it is, leave it as it is by default.
