Install and configure RADIUS Extension

After installing and configuring NPS, install and configure RADIUS Extension. To do this:

1. Run AxidianID.EA.RADIUS.Extension-<version number>.x64.en-us.msi located at Axidian Access <version number>\Axidian NPS RADIUS Extension\<version number>.
2. Configure RADIUS Extension in the registry or with group policies.

In registry

1. Open Registry Editor.
2. In the HKEY_LOCAL_MACHINE\SOFTWARE\Axidian-ID\SrvLocator2 section, modify the following parameters:

• In the ServerUrlBase string parameter, specify the Core Server address in the format https://full_dns_server_name/am/core/.

  Note

  For correct operation, we recommend that you install a client certificate on each Core Server.

• In the IsIgnoreCertErrors numeric parameter, specify the value 0 or 1.

  This parameter stands for ignoring the Core Server authentication certificate errors. With the value 1, certificate errors are ignored.

• If required, you can set the session hold period in the SessionHoldPeriodMs numeric parameter. This is the period during which the session can be reused in case of short-term connection losses to Core Server. During the specified period, the session is stored in the cache and can be reused when a new server connection is requested. The server availability check is not repeated; the cached check result is used instead. After the period expires, the session is terminated. A new session is created at the next server connection request.

  The default parameter value is 180,000 ms (3 minutes).

In Group Policy Editor

1. Add the group policy templates.
2. Open Group Policy Editor.
3. Go to Computer Configuration → Administrative Templates → Axidian ID → Client Connection.
4. Open the properties of the Server connection settings policy.
5. Enable the policy.
6. In the Core Server URL field, enter the Core Server address in the format https://full_dns_server_name/am/core/.
7. If required, enable the Ignore certificate errors option.
8. For the Session object hold period setting, leave the default value — 180,000 ms (3 minutes) — or specify a new one.
9. Click OK.

For more information about configuring RADIUS Extension with policies and in the registry, see the RADIUS Extension section.

Configure access to applications that have not been added

If applications work through NPS (Network Policy Server) with RADIUS Extension installed, but authentication for them is not performed through Axidian Access, configure access for them in Management Console. Otherwise, login into these applications is not available.

To configure access for RADIUS applications that have not been added to Axidian Access:

1. In the Management Console sidebar, open the Configuration section.
2. On the Integration modules tab, select NPS RADIUS Extension.
3. Allow or deny access in the For RADIUS applications that are not registered in Axidian Access setting.