ForgeRock Access Management RADIUS integration

Login to the Acceptto RADIUS Agent with an administrative user and open the radius-agent-config.env file with an editor. It is located in the installed directory of RADIUS Agent. RADIUS clients are configured in this setting.

Go to the bottom of radius-agent-config.env file and change the ARA_CLIENTS attribute as follows. The values should be separated by semicolons (;).

ARA_CLIENTS = An optional name for your AM; IP address of your AM; a shared secret

An example configuration might look like this:

ARA_CLIENTS = AM;192.168.1.50/32;testing12345

Save the file and run the following command to set changes:

docker-compose down && docker-compose up -d

Login to the ForgeRock AM admin portal with an administrative user.

Select the Realm to set MFA up for.

Navigate to the Authentication section and select Modules.

Click on Add Module to create a new authentication module.

Enter a name of your choice and in the Type field. Select RADIUS from the dropdown and click on the Create button.

On the Servers tab, click ADD.

Enter your Acceptto RADIUS Agent information and click on Save.

On the Authentication section select Settings.

Go to the User Profile tab and select Ignored from User Profile’s drop down menu.

Click Save Changes.

Now you can change the authentication module on the default chain of your Realm. Navigate to the Authentication section and select Chains. Click on ldapService.

Click on the edit icon.

In the Select Module field, select the authentication module that was created before from the dropdown and click on Ok button. Click Save Changes.

Note: you can check your authentication module with a url that refers to it, like the following example:

http://Openad.example.com:8080/AM-7.1.0/XUI/#login/&authIndexType=module&authIndexValue=”enter-authentication-module-name”

Go to the ForgeRock Access Management Realm you created and enter your credentials.

You’ll receive a push notification on your It’sMe mobile application. After approving the authentication request through the app, you will be logged in.