Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Overview
1.6 Supported Protocols
The following protocols are supported by the Digipass Plug-In for IAS:
PAP
CHAP
MS-CHAP with MPPE (Microsoft Point-to-Point Encryption)
MS-CHAP2 with MPPE
EAP-MD5
1.7 Unsupported by Digipass Plug-In for IAS
1.7.1 Windows 2000 Limitations
These are not supported with Windows 2000:
EAP-MD5
Challenge/Response
1.7.2 Other Unsupported Protocols
These protocols are not supported by the Digipass Plug-In for IAS:
Other EAP types
PEAP
EAP-TTLS
Various EAP types
1.7.3 IAS Remote Access Policy Limitations
Windows Server 2003
Remote Access Policy Conditions may be set based the password protocol being used for an
authentication request, using the Authentication-Type option.
When the IAS Plug-In authenticates a login, the Authentication-Type is recorded within IAS as
"Extension", regardless of the actual password protocol used. Therefore, any Remote Access
Policy Conditions limiting the password protocol being used will not work with the IAS Plug-In.
Example
Authentication-Type is set to PAP, meaning that any authentication requests which
do not use the PAP password protocol will be rejected. If the IAS Plug-In is
configured to use the PAP protocol, the Authentication-Type recognised when it
makes an authentication request will be 'Extension' (meaning that IAS has
recognised it as an IAS extension). The request will be failed by IAS because the
password protocol being used by the Plug-In was only registered as 'Extension', not
as 'PAP'.
© 2005 VASCO Data Security Inc. 18