Security

Reply
Contributor I
Posts: 24
Registered: ‎07-02-2013

ClearPass MFA integration using EAP-TLS certificate authentication

Hi, I would like to check whether is it possible to provide MFA integration using EAP-TLS certificate authentication? Is there been any documentation on this? Thank you.

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Using ClearPass Onboard or using internal PKI ?
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor I
Posts: 24
Registered: ‎07-02-2013

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Thanks for the fast reply! We are using OnBoard.

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Starting in 6.6.x you can integrate ClearPass Onboard with several MFA options Cloud MFA Providers= DUO , Kasada to name a few and also SMS as part of the Onboarding Captive portal authentication/verification workflow
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Please explain your scenario further. In most cases, the authentication method is independent of MFA.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I
Posts: 24
Registered: ‎07-02-2013

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Is it possible that after EAP-TLS (certificate) authentication, prompt the user to key in another password for 2nd token authentication before the user can be connected to the network? 

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Which MFA provider are you using?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I
Posts: 24
Registered: ‎07-02-2013

Re: ClearPass MFA integration using EAP-TLS certificate authentication

We would be using RSA as the MFA provider.

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Legacy RSA token 2FA unfortunately cannot be used with EAP-TLS as there is no mechanism append the PIN code.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I
Posts: 24
Registered: ‎07-02-2013

Re: ClearPass MFA integration using EAP-TLS certificate authentication

Thanks, is there any other MFA provider that can support EAP-TLS integration?

Search Airheads
Showing results for 
Search instead for 
Did you mean: