RSA On-demand authentication method generates a unique, time-based one-time password (OTP) at the server using the short message service (SMS)
To enable the above features you have to install at least RSA 7.1 and have a On-Demand license.
Configuration in the RSA Server
This post describes RSA Authentication Manager 7.1 with RADIUS server installed on a Windows
2003 R2 server. The RSA server has a LDAP mapping to Active Directory for authenticating users.
To configure SMS token delivery you need some kind of method to send SMS messages. RSA and
Clickatell have partnered to enable delivery of SecurID tokencodes to mobile devices via SMS/text. RSA
Authentication 7.1 has a build-in method for delivering SMS messages through Clickatell.
- To obtain a free trial and further information please refer to below link:
http://www.clickatell.com/rsa/securid.php
Configuration in the Juniper IVE:
a. User enters regular credentials
b. SA sends Radius Access Request with these credentials to radius server
c. Radius server validates the credentials and sends Access Challenge to SA
d. SA presents another page to user
e. User types the OTP/SMS based password/string/etc
f. SA sends this back to Radius and allows/denies login based on what the Radius server sends
(accept/reject)
Step 1: Create a New RADIUS Server in the Juniper IVE ~ SA
Step 2: Create a custom new RADIUS Rule:
Step 3: Add a value that matches the value returned by Radius Server in Access Challenge packet
