Configure a RADIUS Profile for the Cloud Authentication Service

Document created by RSA Information Design and Development on Oct 7, 2016Last modified by RSA Information Design and Development on Oct 20, 2017
Version 9Show Document
  • View in full screen mode

RSA SecurID Access provides one RADIUS profile named Default RADIUS Profile. Use this profile to specify the return list and checklist attributes that are exchanged between the RADIUS client and server during authentication. These attributes are used to validate the request and to set parameters for the user's session.

Configuring a RADIUS profile is optional.

Before you begin

You must be a Super Admin for the Cloud Administration Console.

Procedure 

  1. In the Cloud Administration Console, click Authentication Clients > RADIUS > RADIUS Profile tab.
  2. Click Edit next to the Default RADIUS Profile.
  3. (Optional) In the Return List field, click ADD.
  4. In the Attribute Name field, begin typing the attribute name to see valid attributes from the RADIUS dictionary file and select the one you want from the drop-down list.
  5. If you want to leave the attribute value blank and ensure that the value in the user request is returned to the client in the RADIUS response, select the Echo checkbox.
  6. If you did not select Echo, you must specify a value in the Value field. Some attributes support multiple values, and the order is important for certain attributes. The return list in the RADIUS server response displays the values in the order you specify.
  7. Click Save.
  8. (Optional) In the Checklist field, click ADD.
  9. In the Attribute Name field, begin typing the attribute name to see valid attributes from the RADIUS dictionary file and select the one you want from the drop-down list.
  10. In the Value field, specify the attribute value required in the user’s authentication request. Some attributes support multiple values, and the order is important for certain attributes.

    Note:  You must enter the value using the correct data type. The field hint indicates the data type.

  11. Select the Optional for user request processing checkbox if you want the RADIUS server to processes authentication requests that do not contain this attribute. When unselected, the RADIUS server rejects requests that do not contain this attribute.
  12. Click Save.
  13. (Optional) Click Publish Changes if you want to activate the setting immediately. Otherwise, changes accumulate and are published during the next publish operation.

 

 

You are here
Table of Contents > RADIUS > Configure a RADIUS Profile for the Cloud Authentication Service

Attachments

    Outcomes