HID Juniper and ActivID AS OOB - Manual (Page 9)

4TRESS FT2011 Out-of-Band Authentication and Juniper Secure Access | RADIUS Channel Integration Handbook
External Release | © 2012-2013 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page | 9
4. In the Custom Radius Rules section, click New Radius Rule. When a person enters a username and
password, the initial authorization request is sent to the server. The server may respond with either a Challenge
or Reject packet.
5. In the Add (or Edit) Custom RADIUS Challenge Rule window, select the packet type (Challenge or Reject),
and then specify what action to take (used for OOB authentication and emergency access—4TRESS sends an
SMS if a correct SMS PIN is entered = access-challenge).
6. To create a custom challenge rule, select the Response Packet Type:
• Access Challenge—sent by the RADIUS server requesting more information in order to allow
access.
• Access Reject—sent by the RADIUS server rejecting access.
The following image illustrates two sample options.
7. Click Save.
Once you have saved your custom rule, it appears in the Custom RADIUS Authentication Rule section (illustrated
next).
Note: To delete a rule, select the checkbox next to the rule, and then click Delete.