CA Strong Authentication Administration Guide › How to Configure CA AuthMinder for RADIUS

How to Configure CA AuthMinder for RADIUS

As an administrator, you can configure CA AuthMinder for one of the following roles:

• As a RADIUS server that processes authentication requests from RADIUS clients

  The following steps summarize the process that occurs when you configure CA AuthMinder as a RADIUS server:

  1. A RADIUS client sends an authentication request to CA AuthMinder.
  2. CA AuthMinder authenticates the user and sends the authentication response.
• As a proxy server that passes authentication requests to an existing RADIUS server

  The following steps summarize the process that occurs when you configure CA AuthMinder as a proxy server for a RADIUS server:

  1. A RADIUS client sends an authentication request to CA AuthMinder.
  2. Based on the authentication policy configured in CA AuthMinder, the request is forwarded to the RADIUS server. For example, you can configure CA AuthMinder to forward authentication requests to the RADIUS server when the user or user’s credential is not found in the CA AuthMinder database.

In some scenarios, you configure CA AuthMinder as a RADIUS server and as a proxy to a RADIUS server. For example, if you have recently installed CA AuthMinder. Some users were migrated to CA AuthMinder, and the remaining users are still on the existing RADIUS solution. In this case, you configure CA AuthMinder as both a RADIUS server and as a proxy to a RADIUS server. The RADIUS authentication requests from users that are migrated to CA AuthMinder are handled by CA AuthMinder. For all other users, CA AuthMinder forwards the RADIUS authentication requests to the existing RADIUS server because the users or users’ credentials are not found in the CA AuthMinder database.

This scenario explains the procedure to configure CA AuthMinder for RADIUS. The following diagram outlines the steps of this procedure:

Follow these steps:

1. Add RADIUS clients.
2. If you configure CA AuthMinder as a proxy for a RADIUS server, then configure CA AuthMinder as the proxy server.
3. (Optional) Create a credential type resolution configuration.
4. Assign a default RADIUS credential type resolution configuration.
5. If you configure CA AuthMinder as a proxy for a RADIUS server, then configure the default authentication policy.
6. Refresh cache.