Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Policies
4 Policies
4.1 What are Policies?
Policies allow you comprehensive control over the authentication process. At least one Policy
is required to determine whether various features are enabled, and how logins should be
handled by the IAS Plug-In. A number of example Policies are included when the Digipass
Plug-In for IAS is installed.
4.2 How Do They Work?
The principle of Policies is that a single Policy is applied to an authentication request. The
choice of Policy is made by the Component (eg. IAS Plug-In or RADIUS Client). All login
requests for a particular Component are handled according to the settings of its chosen Policy.
In the case of the Digipass Plug-In for IAS, a Component must be present for the IAS Plug-In.
This Component will identify the Policy to be used as a default for any requests that it handles.
However, if you wish to apply a different Policy according to the RADIUS Client (eg. NAS, VPN
appliance), you are allowed to create additional Component records that will specify the
preferred Policies for those cases.
User attempts to log into RADIUS Client
RADIUS Client sends authentication
request to IAS
IAS Plug-In checks if there is a
Component record for the RADIUS Client
If there is no RADIUS Client Component
record, the IAS Plug-In looks up its own
Component record
IAS Plug-In selects the Policy set for
the Component
IAS Plug-In handles authentication
request according to Policy settings
Image 22: Policy Selection
© 2005 VASCO Data Security Inc. 52