The Vault also supports RADIUS challenge-response authentication, where the server sends back a challenge prompting the user for more logon information, such as additional authentication information contained on external tokens. Reply on Twitter 1622876715470016512 Retweet on Twitter 1622876715470016512 33 Like on Twitter 1622876715470016512 46 Twitter 1622876715470016512 Load More.The Vault enables users to log on via Remote Authentication Dial-In User Service (RADIUS) authentication, using logon credentials that are stored in the RADIUS server. The user is authenticated and gets access to the resources.

The local Network Policy Server passes the acknowledgment to the Citrix ADC (RADIUS Response).

The Azure MFA service passes the confirmation of the second factor via the NPS extension to the local NPS.

Confirmation of the second factor on the mobile device by the user.

Via push notification, the second factor is transmitted to the mobile phone via the preferred method (MFA app, call or SMS).

The NPS is requesting the second factor through the NPS Extension for Azure MFA in the Multi-Factor Authentication Service (Azure MFA Service).

After successful verification, a confirmation is sent to the NPS.

The Network Policy Server passes the credentials to the Active Directory Controller (AD Proxy).

The credentials are forwarded to the local NPS (Network Policy Server) via the Citrix ADC (RADIUS Request).

The user calls the Unified Gateway page via URL (e.g., ) & enters his credentials (username & password).

Microsoft Azure MFA Server in Citrix ADC Sequence of a Microsoft Azure MFA Cloud Authentication

Azure radius