Forum Discussion

Jugoslav_106711's avatar
Jugoslav_106711
Icon for Nimbostratus rankNimbostratus
Apr 16, 2013

APM querying NPS (Radius) for User Group

Hi folks,   we have following scenario, APM is using Radius for authentication and we need to take group membership from AD. As NPS does not indicate the user AD group membership, we need to cust...
BIG-IP Access Policy Manager (APM)
remote access
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Apr 17, 2013
APM isn't going to query for additional values in a Radius authentication. As part of the auth process, the Radius server will pass attributes back to APM. Those values will then populate a series of session.radius.last.attr.* session variables. So it really depends more on how you configure your Radius environment and what values you pass back. If that still doesn't meet your requirements, you can still do an AD or LDAP query to get what you need.