EnricoR.01614 (Customer) asked a question.
SAML v2 IDP and TACACS in MFA
I have configured SSO SAMLv2 Application. I'd like to add a TACACS external authentication to support Multi Factor Authentication. How can I proceed ?
- b5n6c (b5n6c)
Hi Enrico,
Thanks for contacting the OKTA Community.
Prerequisites for this use case is that first you have to integrate the custom authenticator. Please refer this docx :- Custom authenticator integration guide | Okta Developer
Go to okta admin console > go to security > Click on authenticators > Click on Add authenticator > Click add custom authenticator
Interface will open, where you'll have to add the details of the custom authenticator and assigned to particular application.
For detailed view of the fields please refer this docx :- https://help.okta.com/oie/en-us/content/topics/identity-engine/authenticators/custom-authenticator.htm
After adding custom authenticator you have to set-up in the enrollment Policy.
Expand Post - EnricoR.01614 (Customer)
Still not clear to me how the custom authenticator could communicate to TACACS server. Which option to choose in the application creation and if there is the need to add some code to manage the notifications. Is there any documentation or examples showing such integration with more details ? Documentation for smilar integration with RADIS server could help too. Thanks.
This question is closed.
Hi Enrico,
Thanks for contacting the OKTA Community.
Prerequisites for this use case is that first you have to integrate the custom authenticator. Please refer this docx :- Custom authenticator integration guide | Okta Developer
Go to okta admin console > go to security > Click on authenticators > Click on Add authenticator > Click add custom authenticator
Interface will open, where you'll have to add the details of the custom authenticator and assigned to particular application.
For detailed view of the fields please refer this docx :- https://help.okta.com/oie/en-us/content/topics/identity-engine/authenticators/custom-authenticator.htm
After adding custom authenticator you have to set-up in the enrollment Policy.