Skip to main content

Add and configure an integrated application

In Management Console, you can:

Optional settings​

Configure the transmission of RADIUS attributes

This setting allows you to add the attributes specified in the NPS server network policy to the Access-Accept response.

This is an optional setting; perform it only if RADIUS attributes need to be transmitted to the client.

To configure the transmission of RADIUS attributes:

  1. Open Network Policy Server.

  2. Expand the Policies → Connection Request Policies section.

  3. Select an existing policy or create a new one and open its properties.

  4. On the Settings tab, go to the RADIUS Attributes → Standard section.

  5. Click Add.

  6. In the Add Standard RADIUS Attribute window, select Filter-Id in the Attributes list and click Add.

  7. In the Attribute Information window, click Add.

  8. Make sure that the Attribute information parameter is a string and enter a string in the format IID_CR_AccessAccept_Attributes:<identifier of the required attribute 1>, <identifier of the required attribute 2>

    Tip

    If there are several attributes, specify the identifiers separated by commas.

    Example
    IID_CR_AccessAccept_Attributes:25, 13

  9. Close all the windows, click Apply, and restart the NPS service.

Configure access parameters in the NPS policies

In the policy on the NPS server, you can set the following parameters:

  • The common login method.
  • Login methods for user groups.

This is an optional setting.

To configure the access parameters:

  1. Start Network Policy Server.

  2. Go to the Policies → Connection Request Policies section.

  3. Create a new policy or use an existing one and open its properties.

  4. On the Settings tab, go to the RADIUS Attributes → Standard section.

  5. Click Add.

  6. In the Add Standard RADIUS Attribute window, select Filter-Id in the Attributes list and click Add.

  7. In the Attribute Information window, click Add.

  8. Make sure that the Attribute information parameter is a string and enter the corresponding values.

If you configure the common login method, the users who are not affected by the Configuring login methods for user groups parameter use the specified authentication provider in RADIUS applications.

To configure the common login method, enter a value in the format IID_ModeId_{ProviderId}, where ProviderId is the provider identifier.

The ProviderId value is unique for each provider.

Identifier values of the providers that support RADIUS authentication
  • {0FA7FDB4-3652-4B55-B0C0-469A1E9D31F0} — Software TOTP,
  • {B772829C-4076-482B-B9BD-53B55EA1A302} — Software TOTP (Challenge\Response),
  • {F696F05D-5466-42b4-BF52-21BEE1CB9529} — Passcode,
  • {EBB6F3FA-A400-45F4-853A-D517D89AC2A3} — SMS OTP,
  • {CA4645CC-5896-485E-A6CA-011FCC20DF1D} — Telegram,
  • {093F612B-727E-44E7-9C95-095F07CBB94B} — Email OTP,
  • {AD3FBA95-AE99-4773-93A3-6530A29C7556} — Hardware OTP,
  • {631F1011-2DEE-47C5-95D8-75B9CAED7DC7} — Hardware OTP (Challenge\Response),
  • {CEB3FEAF-86ED-4A5A-BD3F-6A7B6E60CA05} — Hardware TOTP,
  • {D338344E-7AB7-4D82-9B53-C3678662B153} — Hardware TOTP (Challenge\Response),
  • {DEEF0CB8-AD2F-4B89-964A-B6C7ECA80C68} — Axidian Key,
  • {CB3D3B0A-29C6-4BA4-939D-09B126C10C2E} — Passcode + Software TOTP (Challenge\Responce),
  • {E5D3185C-9A13-4538-BE8F-D4E1C50A329E} — Passcode + Axidian Key,
  • {F15FD7EC-19EA-4384-846E-A2D0BE149FA2} — Secured TOTP,
  • {7F3DE86F-59D1-4476-AA5D-F277E5DD5938} — Secured TOTP (Challenge\Response),
  • {882C1787-FD32-44A2-BA89-F1F529FBE7AB} — Passcode + Secured TOTP (Challenge\Response),
  • {4E32199B-9A21-4CD7-8646-C70C48B55ED9} — Passcode + SMS OTP (Challenge\Response).
Note

Challenge\Response is an authentication method where one side sends a request (the "challenge") and the other side must provide the correct "response" for successful authentication.

Example of an attribute value with Software OTP Provider
IID_ModeId_{B772829C-4076-482B-B9BD-53B55EA1A302}

  1. Click Apply to save the changes made to the policy.

  2. Restart the NPS service.