Does okta support MS-CHAPv2 pritocol or capble?

14hrk (14hrk) asked a question.

j5v7c likes this.

bogdan.andrisan1.4534936759044734E12 (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:27 AM
Hello,

The MSCHAPv2 protocol is not yet supported and although it is in the works, we do not have an ETA of its release.

Thank you,
Bogdan Andrisan.
Expand Post
Wils (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:28 AM
Hi Spiros,

Are you asking about OMM's WiFi profiles? Or something else? Just want to make sure we get you the correct information.

If you are talking about OMM WiFi profiles, we have an EA feature which will allow you to use PEAP MS-CHAPv2 based connections. See this guide for requirements and caveats: https://help.okta.com/en/prod/Content/Topics/Mobile/Okta_Mobile_WiFi_Profiles.htm

Thanks,
Wils
Expand Post
14hrk (14hrk)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:28 AM
Hi Wils

No this is required for ISE radius to MFA radius proxy communication to allow users to reset their passwords upon expiry.
The MFA server has to be MSCHAPv2 capable.
Expand Post
2urjd (2urjd)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
Any update on this being supported? This causes quite some confusion for users connecting to our VPN with expired credentials.
Expand Post