6.0.3 SSO option in combination with Radius authentication

Hello everyone,

 

 

I think I've read most posts regarding Radius and SSO, but untill now I have not found an answer to my question/problem.

 

This is the case:

 

 

* I've configured an external mastergroup with external authentication.

 

* ext. auth. is done via Radius to a Windows 2003 server running Safeword 2008

 

* It uses Safeword Alpine tokens that supply a OneTimePassword, so there's no challenge-response

 

This setup is working fine, but now I'm facing the problem of supplying a backend server with the right credentials for Single Sign-On.

 

I have two options as far as I know: displaying an extra password field for the SSO password or retrieving this SSO password via the Radius request. As it involves the least user input, I would like to use the second option: Radius.

 

 

From what I understand, I should enable the 'Retrieve Single Sign On Password from RADIUS attribute' option in the master group.

 

But I'm not clear what to do next.

 

 

My questions at this point are:

 

 

1. Does Microsofts IAS supply this SSO password out of the box, or do you have to configure it to do so?

 

[I know, not really a DevCentral question, but maybe someone knows already....]

 

 

2. How do I use this Radius attribute in the SSO tab?

 

 

 

Ydo Ehlers