On Prem MFA radius client needs to send NAS-IP or NAS-Identifier

Select Language

0D50Z00008G7VFcSANOkta Classic EngineMulti-Factor AuthenticationAnswered2018-09-05T01:27:39.000Z2017-08-17T19:24:41.000Z2017-08-17T19:24:41.000Z

00u27lcfn6iMl6dSs1t1.4942635922579795E12 (Vermont Electric Coop) asked a question.

Our 2FA Radius server (Vasco IDENTIKEY) needs NAS-IP or NAS-Identifier to find client. Can they be added or are they avalable now?

00u128lgf2xUgeBwa0i71.502310562363028E12 (Customer)
9 years ago
I'm running in to this exact same situation. Have you had any response from Okta?
Expand Post
00u27lcfn6iMl6dSs1t1.4942635922579795E12 (Vermont Electric Coop)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:27 AM
Hi, no i have not but i talked to VASCO about it. There is an option to disable the check of the NAS Lactation and just use the IP address. This does vilote the RFC but it works. The corect solution is to have Okta implment the RFC corectly on there radius agent. But if you have to get it working you can change your vasco config file: https://www.vasco.com/images/KB_120079_tcm42-47137.pdf
Expand Post
00u128lgf2xUgeBwa0i71.502310562363028E12 (Customer)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:27 AM
Hi Fred,

Thanks. Unfortunately, I'm using Open System as my RADIUS server provider, and they're telling me it's not a configurable option.
Expand Post

This question is closed.