Administration

n Because some RADIUS vendors provide the ability to import users from Active Directory, end
users might first be prompted to supply Active Directory credentials before being prompted
for a RADIUS authentication user name and passcode.
Enable Two-Factor Authentication in Horizon Administrator
You enable a Connection Server instance for RSA SecurID authentication or RADIUS
authentication by modifying Connection Server settings in Horizon Administrator.
Prerequisites
Install and configure the two-factor authentication software, such as the RSA SecurID software or
the RADIUS software, on an authentication manager server.
n For RSA SecurID authentication, export the sdconf.rec file for the Connection Server
instance from RSA Authentication Manager. See the RSA Authentication Manager
documentation.
n For RADIUS authentication, follow the vendor's configuration documentation. Make a note of
the RADIUS server's host name or IP address, the port number on which it is listening for
RADIUS authentication (usually 1812), the authentication type (PAP, CHAP, MS-CHAPv1, or
MS-CHAPv2) and the shared secret. You will enter these values in Horizon Administrator. You
can enter values for a primary and a secondary RADIUS authenticator.
Procedure
1 In Horizon Administrator, select View Configuration > Servers.
2 On the Connection Servers tab, select the server and click Edit.
3 On the Authentication tab, from the 2-factor authentication drop-down list in the Advanced
Authentication section, select RSA SecureID or RADIUS.
4 To force RSA SecurID or RADIUS user names to match user names in Active Directory, select
Enforce SecurID and Windows user name matching or Enforce 2-factor and Windows user
name matching.
If you select this option, users must use the same RSA SecurID or RADIUS user name for
Active Directory authentication. If you do not select this option, the names can be different.
5 For RSA SecurID, click Upload File, type the location of the sdconf.rec file, or click Browse
to search for the file.
Horizon 7 Administration
VMware, Inc. 72