Configuring RADIUS (Cloud) for Workspace ONE Access

You configure the User Auth service in the Workspace ONE Access connector to use the connector-based RADIUS (cloud deployment) authentication method when users log into Workspace ONE.

Because RADIUS two-factor authentication solutions work with authentication managers installed on separate servers, the RADIUS server must be configured and accessible to the Workspace ONE Access service.

When users sign in to their Workspace ONE Hub portal and RADIUS authentication is enabled, the login dialog box requests that users enter their RADIUS authentication user name and passcode. If the RADIUS server issues an access challenge, the Workspace ONE Access service displays a dialog box prompting for a second passcode.

After a user enters credentials in the dialog box, the RADIUS server can send an SMS message or email, or text using some other out-of-band mechanism to the user's cell phone. The user enters the one-time passcode into the login dialog box to complete the authentication. Currently support for RADIUS challenges is limited to prompting for text input.

If the RADIUS server provides the ability to import users from Active Directory, end users might first be prompted to supply Active Directory credentials before being prompted for a RADIUS authentication user name and passcode.