Forum Discussion

Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
Apr 16, 2021

Radius Authentication with Microsoft NPS and Azure MFA not working

We have configured F5 with Microsoft NPS to leverage Microsoft Azure AD MFA. F5 is sending Radius authentication request to Microsoft NPS server. However NPS server error. Looks like NPS server with ...
BIG-IP Access Policy Manager (APM)
LTM
security
  • spalande's avatar
    spalande
    Apr 16, 2021

    which version are you on? I can see this feature from 13.x and onwards.

     

    By default apm uses session.logon.last.username variable for username. See if you can set custom APM variable for it and change it to UPN variable you get after LDAP query.

Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
Apr 16, 2021

Sanjay. Thanks for the reply. How do i get username source and password source attributes in my radius AAA in VPE. how to add the two attributes.

 

 

    • Raghbir_Sandhu's avatar
      Raghbir_Sandhu
      Icon for Altocumulus rankAltocumulus
      Apr 16, 2021

      Sanjay, I don't see the additional two attributes. see the attached screenshot.

    • spalande's avatar
      spalande
      Icon for Nacreous rankNacreous
      Apr 16, 2021

      which version are you on? I can see this feature from 13.x and onwards.

       

      By default apm uses session.logon.last.username variable for username. See if you can set custom APM variable for it and change it to UPN variable you get after LDAP query.

    • Raghbir_Sandhu's avatar
      Raghbir_Sandhu
      Icon for Altocumulus rankAltocumulus
      Apr 16, 2021

      we are using 12.1.5.3. May be that's why I don't see two additional variables. what the question remain same. The radius request attribute name is "User-Name". can i just assign UPN value to the "User-Name" attribute via variable assignment step. before the MFA step. Please advise.