APM : Radius Challenge/Response authentication

Start -> Logon Page -> Radius Auth -> Resource Assignment The APM will act accordingly (present another page asking for OTP) if it receives an Access-Challenge from the Radius server. You don't need to take care of that (and can't.. as refered with the RFE for customization). If you have multiple Radius server.. be careful with the LB, as if you don't persist correctly, APM may send the Request to Srv1 and the Challenge to Srv2.