ADSelfService Plus supports the following types of authenticators for VPN MFA:
These authenticators are automatically applicable for all the endpoints providing RADIUS authentication.
Challenge-based authenticators are applicable only when:
While ADSelfService Plus provides MFA enablement for all RADIUS-based VPN providers, not all authenticators supported by the product are available in these providers. This article provides a list of popular VPN providers and other RADIUS-based clients and the authenticators supported by them.
| VPN and other RADIUS clients | Supports one-way authenticators provided in ADSelfService Plus? | Supports challenge-based authenticators provided in ADSelfService Plus? |
| Fortinet VPN | Yes | Yes |
| OpenVPN Access Server (AS) | Yes | Yes |
| Cisco ASA AnyConnect VPN | Yes | Yes |
| NetMotion Mobility VPN | Yes | No |
| Microsoft RDGateway | Yes | No |
| Microsoft Routing and Remote Access Service (RRAS) | Yes | No |
| Palo Alto VPN (GlobalProtect client) | Yes | Yes |
| WatchGuard VPN | Yes | No |
| Sonic Wall VPN | Yes | Yes |
| Pulse Secure VPN | Yes | Yes |
| Juniper | Yes | Yes |
| Checkpoint | Yes | Yes |
| VMWare Horizon | Yes | Yes |
| ForcePoint | Yes | Yes |
| Cisco Meraki | Yes | No |
| Citrix/NetScaler Gateway | Yes | No |
Note: Status of authenticator availability may change in the future.
Disclaimer : While the VPN providers listed above have been officially tested and confirmed to support the authenticators mentioned, other VPN providers and endpoints employing RADIUS protocol for authentication can support these authenticators as well. Please contact the support team ( support@adselfserviceplus.com ) if you have trouble assessing whether the VPN provider used in your organization supports these authenticators.
Need further assistance? Fill this form, and we'll contact you rightaway.
Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console.
Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus!
Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.
Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, G Suite, IBM iSeries and more.
Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.
Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.