<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"
"http://www.w3.org/TR/REC-html40/loose.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<title></title>
</head>
<body style="font-family:Arial">
<div>Hello,<br></div>
<div><br></div>
<div>Trying to implement a MFA with offband token validation.<br></div>
<div><br></div>
<div>The validation phase, between receiving a SMS, opening the web page and clicking the validation link, can take from a couple of seconds to 30s where the radius auth process is waiting to either ACCEPT or REJECT.<br></div>
<div><br></div>
<div>So, the solutions to allow for other authentications to happen at the same time are:<br></div>
<div><br></div>
<div>1. we set a FarmSize other than 0, but we break the use of Context and so multiple auth methods stop working, or<br></div>
<div>2. we Fork the authentication process where the validation happens (AuthBy SMSToken)<br></div>
<div><br></div>
<div>The last seems to be the best solution but we can't seem to get it working properly. On IGNORE the authentication continues and the clients end up getting an ACCEPT. The SMSToken continues on the background but to no use.<br></div>
<div><br></div>
<div>The configuration is:</div>
<div><br></div>
<div><Handler ...><br></div>
<div> AuthByPolicy ContinueUntilReject<br></div>
<div> <AuthBy GROUP><br></div>
<div> AuthByPolicy ContinueUntilAccept<br></div>
<div> AuthBy NTLM_DOM_A<br></div>
<div> AuthBy NTLM_DOM_B<br></div>
<div> AuthBy NTLM_DOM_C<br></div>
<div> </AuthBy><br></div>
<div> AuthBy SMSToken<br></div>
<div> AuthBy DynPool_this<br></div>
<div></Handler><br></div>
<div>Thank you.</div>
<div class="impComposeSignature" style="display:none"><br></div>
</body>
</html>