PingAM 8.0.0

RADIUS authentication module

Authentication modules and chains have been removed in AM 8.0. To continue using the RADIUS authentication module in this release, you must re-enable modules and chains.

Re-enable modules and chains

  1. Go to Configure > Server Defaults > Advanced in the AM admin UI.

  2. Add the org.forgerock.am.authentication.chains.enabled property and set it to true.

  3. Save your changes.

  4. Restart AM or the container where it runs.

You can now access modules and chains through the REST endpoints. Modules and chains aren’t accessible through the AM admin UI.

The RADIUS authentication module lets AM act as a RADIUS client, delegating authentication to an external RADIUS server:

RADIUS authentication module: successful authentication flow
Figure 1. RADIUS authentication module: successful authentication flow

Use the RADIUS authentication module when you want AM to pass usernames and passwords through to an external RADIUS server, so that it can authenticate the users.