topic Re: MFA for admin access on Smart console in Firewall & Security Management

MFA for admin access on Smart console

carl_t — Tue, 22 Sep 2026 10:05:10 GMT

Hi All

We have a requirement to do MFA on our Smartconsole.

I have tried to setup Windows NPS with the Entra ID extension, it appears to send a challenge request back to the Smartconsole and then just fails, I can see in the packet capture the AV pair sending the "Enter your Microsoft verification code" but the console doesnt ask for anything

We use Microsoft authenticator with OTP.

Has anyone got this working?

Re: MFA for admin access on Smart console

simonemantovani — Tue, 22 Sep 2026 10:39:49 GMT

Hello

for my experience, I'm not sure that SmartConsole can handle the challenge-response field and display a second form requesting OTP.

In the past I tried this kind of configuration with no success, and then I configured MFA with NPS and Cisco DUO and push notifications, in this scenario when you authenticate using username and password, a push notification is received, when you accept the push notification then you're authenticated.

Did you evaluate to use SAML instead of Radius?

Re: MFA for admin access on Smart console

carl_t — Tue, 22 Sep 2026 11:04:18 GMT

Hi, thanks for the response, we could not get SAML working with Entra ID, it kept failing, I logged a ticket with support and they just blamed it on Entra ID and were not much help.

Has anyone on here got it working with Entra? we are on R82

Re: MFA for admin access on Smart console

raw — Tue, 22 Sep 2026 12:39:38 GMT

Hey Carl,

We are using SAML login with Entra for multiple Management servers. What errors do you get? Or at what stage does it fail?

Re: MFA for admin access on Smart console

carl_t — Tue, 22 Sep 2026 14:36:29 GMT

Hi, looks like we have made a step forward now, but getting the below error when signing in

Re: MFA for admin access on Smart console

raw — Thu, 24 Sep 2026 15:20:50 GMT

Great.

It seems like the Groups claim has not been added. the username and the groups claim should be added manually.