Webvpn authentication via SDI using PAP

[m.reay]

I am trying to allow users accessing Webvpn on ASA (7.21) to authenticate against RSA SDI Token Server via ACS.

The ACS server is receiving authentication from the ASA box using CHAP, and because it knows the RSA SDI server only talks PAP - it is giving an unknown error.

Is there a way to make the ASA box talk PAP to the ACS box.

This is a configurable option for IPSEC but not for WEBVPN, although it was in previous versions.

Thanks in advance.

[rdlucas]

Unfortunately I can't even find how to make it talk PAP using IPSEC. Where is the magical checkbox or CLI hidden command that lets me do that?

Sorry I can't help you with the SSL side of things.