APM with Entrust Identity guard token not asking to pick a new PIN

Hello Everyone,

 

Here is a summary of the issue. We have an access policy that allows users to login to some remote apps using AD + token pin (so basically two factor authentication). If the user has their PIN already set then the page works beautifully.

 

The issue starts if a new pin is assigned to the token or the PIN has been reset. The user types in their AD credentials then the temporary PIN + token code and in a perfect world they would get a new page or a prompt to enter in a new PIN, re-enter the new pin and then login with the new pin information.

 

Using wireshark I can see the proper radius information being passed and I can hack my way through it but a regular user needs to see those prompts to know what they need to do.

 

Long story short has anyone got this working with APM and Entrust tokens?