HID Microsoft UAG and 4TRESS AS - Manual (Page 4)

ActivIdentity 4TRESS and Microsoft Unified Access Gateway | Integration Handbook P 4
External Use | July 17, 2012 | © 2012 ActivIdentity
1.0 Introduction
The Microsoft
®
Forefront
™
Unified Access Gateway 2010 enables a secure remote access service for both
managed and unmanaged computers as well as mobile devices. The gateway may be used to enable corporate
network access over a virtual private network (VPN) and publish files and/or applications for remote users.
ActivIdentity ® solutions may be integrated with Microsoft Forefront Unified Access Gateway 2010 to provide a
strong authentication method that is flexible, scalable, and simple to manage. ActivIdentity offers the following
solution:

ActivIdentity
® 4TRESS™ Authentication Appliance—Offers easy implementation and support for
multiple authentication methods that are useful for diverse audiences over the RADIUS channel,
including user name and password, mobile and PC soft tokens, one-time passwords, and transparent
Web soft tokens.
This document explains how to set up ActivIdentity 4TRESS Authentication Appliance, version FT2011 SP1 with
Microsoft Forefront Unified Access Gateway (UAG). Use this handbook to enable authentication to Microsoft
Forefront UAG over the RADIUS protocol using the RADIUS Front End feature of ActivIdentity 4TRESS.
1.1 Scope of Document
The scope of this document is limited to setting up the integration between Microsoft Forefront UAG and
ActivIdentity 4TRESS for authentication and does not include instructions on publishing applications on a
Forefront UAG trunk.
1.2 Prerequisites
The following pre-requisites should be met:

ActivIdentity 4TRESS Authentication Appliance has been set up according to ActivIdentity 4TRESS
Authentication Appliance Setup Guide

The RADIUS Front End feature of 4TRESS has been configured according to ActivIdentity 4TRESS
Authentication Appliance RADIUS Front End Solution Guide

The Soft Token Activation Portal feature of 4TRESS has been set up according to ActivIdentity
4TRESS Authentication Appliance Soft Token Solution Guide

A Windows Server 2008 R2 Enterprise edition with two network adapters available is joined to a
domain with a domain controller

Microsoft Forefront UAG is installed on the Windows Server 2008 R2 Enterprise edition server
1.3 Document References
The following documents provide a relevant background to the solution:

ActivIdentity Document References
ActivIdentity 4TRESS Authentication Appliance Setup Guide
ActivIdentity 4TRESS Authentication Appliance RADIUS Front End Solution Guide