topic Re: ACS 5.3 SecurID and AD for vpn access in Network Access Control

ACS 5.3 SecurID and AD for vpn access

r.spiandorello — Mon, 11 Mar 2019 02:14:34 GMT

Hi, within ACS 5.3, I'd like to use 2 external authenticator for the same service, like vpn remote-access.

For the authentication, I know I can create an identity chain, to query SecurID and then AD, in case of user not found in SecurID.

For the authorization rules, I need to provider a wide vèn access for SecurID users and narrow vpn access for AD user.

Are there some parameter to use in compound conditions for SecurID ?

How to ?

thanks

ACS 5.3 SecurID and AD for vpn access

jrabinow — Tue, 26 Jun 2012 20:01:37 GMT

You can use the following attribute in the authorization condition. The "AuthenticationIdentityStore" attribute in the "System" dictionary. This contains the name of the dictionary that was authenticated against. Best to combine this with condition

"System.AuthenticationStatus match AuthenticationPassed" and "System.AuthenticationIdentityStore equals RSA"

Re: ACS 5.3 SecurID and AD for vpn access

r.spiandorello — Thu, 05 Jul 2012 09:58:01 GMT

ok, but can I use RSA for authentication and AD for authorization (in case of user sync between RSA and AD) ?

The "Attribute retrieval sequence" in "Identity Sote Sequence" could help me ?

That should be great.

thank you in advance