Integration Guides

GreenRADIUS can integrate with a wide variety of applications, network devices, operating systems, and identity platforms to enforce two-factor authentication. The appropriate integration method depends on the authentication interfaces supported by the system being protected.

For VPNs, firewalls, and other network devices that support RADIUS authentication, GreenRADIUS can generally be configured as a standard RADIUS authentication server. GreenRADIUS currently supports PAP, PEAP, and EAP-TTLS-GTC for RADIUS authentication. CHAP, MS-CHAP, and MS-CHAPv2 are not supported.

GreenRADIUS also provides dedicated integration methods for Windows Logon, Linux PAM, ADFS, websites and applications, and FIDO2 authentication.

Choosing an Integration Method

Before You Begin

Before configuring an integration:

1. Make sure GreenRADIUS has been deployed and is reachable from the system being integrated.
2. Configure the appropriate user directory and import the users who will use two-factor authentication.
3. Review the prerequisites in the applicable integration guide. Some integrations require a specific GreenRADIUS license module or client component.
4. For RADIUS integrations, add the application, server, firewall, or other device as a RADIUS client under Global Configuration > Client-based Authentication Policies, and configure the same shared secret on both systems.
5. Test authentication before deploying the integration to production users.

If your application or device supports standard RADIUS but does not have a dedicated integration guide listed above, GreenRADIUS can generally be integrated by configuring GreenRADIUS as the RADIUS authentication server. See Authentication Requests for supported RADIUS authentication methods and general configuration information.