Administration

Setting Up Other Types of User
Authentication
4
Horizon 7 uses your existing Active Directory infrastructure for user and administrator
authentication and management. You can also integrate Horizon 7 with other forms of
authentication besides smart cards, such as biometric authentication or two-factor authentication
solutions, such as RSA SecurID and RADIUS, to authenticate remote desktop and application
users.
This chapter includes the following topics:
n Using Two-Factor Authentication
n Using SAML Authentication
n Configure Biometric Authentication
Using Two-Factor Authentication
You can configure a Horizon Connection Server instance so that users are required to use RSA
SecurID authentication or RADIUS (Remote Authentication Dial-In User Service) authentication.
n RADIUS support offers a wide range of alternative two-factor token-based authentication
options.
n Horizon 7 also provides an open standard extension interface to allow third-party solution
providers to integrate advanced authentication extensions into Horizon 7.
Because two-factor authentication solutions such as RSA SecurID and RADIUS work with
authentication managers, installed on separate servers, you must have those servers configured
and accessible to the Connection Server host. For example, if you use RSA SecurID, the
authentication manager would be RSA Authentication Manager. If you have RADIUS, the
authentication manager would be a RADIUS server.
To use two-factor authentication, each user must have a token, such as an RSA SecurID token,
that is registered with its authentication manager. A two-factor authentication token is a piece of
hardware or software that generates an authentication code at fixed intervals. Often authentication
requires knowledge of both a PIN and an authentication code.
VMware, Inc.
70