MultiFactor Radius Adapter is a software component developed by MultiFactor for remote access two-factor user authentication.
The component is distributed under an open source license and supports Windows and Linux platfroms:
- Receiving authentication requests through the RADIUS protocol;
- Verifying the first authentication factor — user login and password in Active Directory or Network Policy Server;
- Verifying the second authentication factor on the user's phone.
- Setting up access based on the user's group membership in Active Directory;
- Selective activation of the second factor based on the user's group membership in Active Directory;
- Using user's phone number from Active Directory profile for one-time SMS codes;
- Configuring RADIUS response attributes based on user's Active Directory group membership;
- Proxying Network Policy Server requests and responses;
You can configure first factor (username and password) validation in one of the following ways:
- Active Directory domain validation. Active Directory validates user existence and password correctness. Also, you may perform additional checks against specific conditions: user block, time or network connection limit, password change requirement;
- In a RADIUS server, such as a Network Policy Server where you can configure additional connection policies;
- Without first-factor verification. Validate only the second-factor.
Important! The user's password never leaves your internal network perimeter. Multifactor requires user login and second-factor confirmation only to be transmitted out of your network.
Use RADIUS adapter component in one of the following implementation scenarios:
- Two-factor authentication for VPN devices Cisco, Fortigate, CheckPoint, Mikrotik, Huawei and others
- Two Factor Authentication for Windows VPN with Routing and Remote Access Service (RRAS)
- Two-factor authentication for Microsoft Remote Desktop Gateway
- Two factor authentication for VMware Horizon
- Citrix VDI two factor authentication
- Apache Guacamole two factor authentication
- Two-factor authentication for Wi-Fi hotspots
- And many others