Password + MFA: Primary authentication using password, then the user is prompted to select factors to complete the authentication.RADIUS supports three authentication methods: Supported when the string "CALL" is sent. Push can work with primary authentication with MFA as the push challenge is sent out-of-band. Supported, as long as challenge is avoided. Supported when the string "EMAIL" is initially sent. Supported - as long as challenge is avoided.įor example MFA only or "Password, passcode".
Okta supports the following factors for RADIUS apps:Įxtensible Authentication Protocol - Generic Token Card (EAP-GTC)Įxtensible Authentication Protocol - Tunneled Transport Layer Security (EAP-TTLS) Okta recommends that you enroll no more than eight factors at a given time. The size of the challenge message can be too large for the RADIUS prompt if you let users enroll too many factors.
0 kommentar(er)
