Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized authentication, authorization, and accounting management for users who connect and use a network service. The RADIUS protocol is supported by authentication methods in the Smart ID Digital Access component. See also Examples - Set up Nexus OTP and Nexus Mobile Text as 2FA.

RADIUS client and RADIUS server

A RADIUS client is the client connecting to a RADIUS server for authentication.

• The RADIUS client can be the policy service, a firewall, or the RADIUS plug-in for the policy service.

• Usually, the RADIUS server is the authentication service, but it can proxy the access request to another authentication server, depending on the authentication method being used.

RADIUS back-end server

RADIUS back-end servers refer to authentication servers handling third-party authentication methods. The authentication service can proxy access requests to one or several back-end servers. A back-end server can be an RSA SecurID Server, for example.

Step-by-step instructions

Before you start, log in to Digital Access Admin with an administrator account.

Add RADIUS client

Add RADIUS back-end server

To enable the use of RADIUS back-end servers:

1. In Digital Access Admin, go to Manage System.

2. Click Authentication Service > Manage Global Authentication Service Settings...

3. Check Proxy unknown users.

4. Click Save.

To add RADIUS back-end server:

1. In Digital Access Admin, go to Manage System.

2. Click RADIUS Configuration > Add RADIUS Back-End Server...

3. Enter General Settings. Click the ?-sign for help.

4. Click Save.

Additional information