Administration

Setting Up Other Types of User
Authentication 4
View uses your existing Active Directory infrastructure for user and administrator authentication and
management. You can also integrate View with other forms of authentication besides smart cards, such as
biometric authentication or two-factor authentication solutions, such as RSA SecurID and RADIUS, to
authenticate remote desktop and application users.
This chapter includes the following topics:
n
“Using Two-Factor Authentication,” on page 57
n
“Using SAML Authentication,” on page 61
n
“Congure Biometric Authentication,” on page 66
Using Two-Factor Authentication
You can congure a Horizon Connection Server instance so that users are required to use RSA SecurID
authentication or RADIUS (Remote Authentication Dial-In User Service) authentication.
n
RADIUS support oers a wide range of alternative two-factor token-based authentication options.
n
Horizon 7 also provides an open standard extension interface to allow third-party solution providers to
integrate advanced authentication extensions into Horizon 7.
Because two-factor authentication solutions such as RSA SecurID and RADIUS work with authentication
managers, installed on separate servers, you must have those servers congured and accessible to the
Connection Server host. For example, if you use RSA SecurID, the authentication manager would be RSA
Authentication Manager. If you have RADIUS, the authentication manager would be a RADIUS server.
To use two-factor authentication, each user must have a token, such as an RSA SecurID token, that is
registered with its authentication manager. A two-factor authentication token is a piece of hardware or
software that generates an authentication code at xed intervals. Often authentication requires knowledge of
both a PIN and an authentication code.
If you have multiple Connection Server instances, you can congure two-factor authentication on some
instances and a dierent user authentication method on others. For example, you can congure two-factor
authentication only for users who access remote desktops and applications from outside the corporate
network, over the Internet.
Horizon 7 is certied through the RSA SecurID Ready program and supports the full range of SecurID
capabilities, including New PIN Mode, Next Token Code Mode, RSA Authentication Manager, and load
balancing.
n
Logging in Using Two-Factor Authentication on page 58
When a user connects to a View Connection Server instance that has RSA SecurID authentication or
RADIUS authentication enabled, a special login dialog box appears in Horizon Client.
VMware, Inc.
57