Options

Radius Mix of Hardware and Software Tokens

I am using authpoint for 2fa and I have an issue where if i us push as the type of authentication then my users with hardware tokens cant connect and same for people that dont have service on there phone. Seems like I can only use OTP or Push not both at the same time. Has anyone else ran into this issue is there a solution ?

Comments

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @Sinbomb
    It depends on the type of resource you're using. For instance, RADIUS will only allow you to use one auth method. Since the hardware tokens will only be capable of OTP, you'll be stuck using OTP.

    -James Carson
    WatchGuard Customer Support

  • Options

    @James_Carson is it possible for me to create two groups and sort the user based on push or OTP and then have both protocols?

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @Sinbomb You could do that, but users can only be in one authpoint group. It would make you have to break whatever group (in AD) you're currently syncing against up, or make new ones.

    -James Carson
    WatchGuard Customer Support

Sign In to comment.