MFA for admin access on Smart console

[carl_t]

Hi All

We have a requirement to do MFA on our Smartconsole.

I have tried to setup Windows NPS with the Entra ID extension, it appears to send a challenge request back to the Smartconsole and then just fails, I can see in the packet capture the AV pair sending the "Enter your Microsoft verification code" but the console doesnt ask for anything

We use Microsoft authenticator with OTP.

Has anyone got this working?

[simonemantovani]

Hello

for my experience, I'm not sure that SmartConsole can handle the challenge-response field and display a second form requesting OTP.

In the past I tried this kind of configuration with no success, and then I configured MFA with NPS and Cisco DUO and push notifications, in this scenario when you authenticate using username and password, a push notification is received, when you accept the push notification then you're authenticated.

Did you evaluate to use SAML instead of Radius?

[carl_t]

Hi, thanks for the response, we could not get SAML working with Entra ID, it kept failing, I logged a ticket with support and they just blamed it on Entra ID and were not much help.

Has anyone on here got it working with Entra? we are on R82

[raw]

Hey Carl,

We are using SAML login with Entra for multiple Management servers. What errors do you get? Or at what stage does it fail?

R

[carl_t]

Hi, looks like we have made a step forward now, but getting the below error when signing in