STA uses PAP authentication for Radius.Ĭlicking the more button will allow you to add a secondary Radius server IP address. You can change the number of authentication attempts and time outs to suit your requirements. This will then allow you to click on RADIUS.Ĭonfigure the settings as shown. Log into the UAG appliance and enable Authentication Settings. This sequence is configured on a UAG 3.6 appliance, the steps should be similar on older versions of the appliance. Step 2 – Integration with Universal Access Gateway If you have a firewall in place, ensure that traffic is allowed to communicate with the Safenet public radius IP’s on port 1812 and port 1813 UDP. Enter a name for the service, the public IP range that will be allowed to authenticate with the service and generate a shared secret key that will be used to connect to the service later on in the setup procedure. What the above screenshot shows is how to define an auth node.

This is essentially a public IP address that is allowed to authenticate against the Gemalto radius servers. The guide can be found here.įirst off, we need to add an authentication node to Gemalto STA. Gemalto’s setup guide is quite out of date at this point, but it gives you the information required for setup and to enable MFA on a View connection server. I will assume at this point you have some familiarity with Gemalto’s SAS / STA platform and that you have already synchronised user accounts from Active Directory. Implementation Step 1 – Safenet Trusted Access setup This guide shows how to integrate with Gemalto’s Safenet Trusted Access service. External connections are already handled by a VMware Universal Access Gateway so it is a pretty easy task to include and enable the integration with a radius service to enable MFA.

I had a requirement to implement Multi-Factor Authentication for external access to a Horizon View environment.

Uag vmware horizon