This site requires JavaScript to be enabled
External Customer KB > General > Enabling RADIUS as an Authentication Factor
Enabling RADIUS as an Authentication Factor
Article: KB0010645 Published: 10/31/2023 Last modified: 10/31/2023

Using OneLogin's pre-integrated RSA Authentication Manager, you can configure OneLogin to act as a RADIUS client and require authentication with your RADIUS server as a secondary authentication factor to secure your users' accounts.

Specifications

This factor supports RSA SecurID and OneSpan. New PIN mode and Next Tokencode mode aren't supported. Replicas aren't added and the standard solution is to use port-forwarding, configured on your firewall, to route the RADIUS request to an available server. The OneLogin RADIUS client IP address is taken from the standard OneLogin subnet pool.

OneLogin's integration with SecurID and OneSpan is fully certified and supports user auto-registration and PIN updates via OneLogin's login page. If a user's PIN expires, they can update it in OneLogin using RADIUS's protocol, reducing admin overhead without sacrificing security.

 


 

In your OneLogin admin portal, create a new authentication factor and choose RADIUS from the Partners category.

RADIUS

Hostname

Enter the hostname of your RSA Authentication Manager server.

Port Number

Enter the port number where OneLogin can access your server via RADIUS.

Shared secret

Enter the shares secret configured for your server.

Add RADIUS

Save the new factor and assign it to your users in OneLogin.


Expand/Collapse Comments
:     
Was this helpful?
YesYesNoNo