Forum Discussion

Alb3's avatar
Alb3
Icon for Altostratus rankAltostratus
Jun 27, 2017

APM biometric auth

Hi all! I have a requirement for a two factor authentication for SSL VPN users. first one being AD auth and second one being biometric using thumb / finger scan.

 

Please share your experience for such a solution.

 

Hi, Al

 

application delivery
BIG-IP Access Policy Manager (APM)
security
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Aug 17, 2017

    Hi,

     

    Biometric are used with Match-on-card and certificate based authentication. You can configure On-demand SSL authentication if you require to put AD authentication first or Client Certificate Inspection if you are ok that Biometrics are prompted first.

     

    It works fine using Browsers on Windows. I never tried using Edge Client but I think that Edge Client is using CSP from the system so it should be ok.

     

    That said, I prefer using new generation solution based on Push Notification like Elcard (very popular in my region).

     

    For Biometrics, the usability will be based on the quality of sensors, chips, protocols immplemented by the vendor and supported CSP.

     

  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Icon for Nacreous rankNacreous
    Aug 17, 2017

    Hi,

     

    Biometric are used with Match-on-card and certificate based authentication. You can configure On-demand SSL authentication if you require to put AD authentication first or Client Certificate Inspection if you are ok that Biometrics are prompted first.

     

    It works fine using Browsers on Windows. I never tried using Edge Client but I think that Edge Client is using CSP from the system so it should be ok.

     

    That said, I prefer using new generation solution based on Push Notification like Elcard (very popular in my region).

     

    For Biometrics, the usability will be based on the quality of sensors, chips, protocols immplemented by the vendor and supported CSP.