Password Delegation
Delegating authentication to a 3rd party
Password Delegation for RADIUS is not compatible with PEAP. You must use EAP-TTLS-PAP (preferred) or PAP.
Foxpass can delegate authentication to a 3rd party instead of checking against a Foxpass stored password. Delegating authentication helps secure your integrations by tying them back to your main directory source and reduces user confusion. When delegating authentication, Foxpass essentially acts as a proxy between the integration and your directory. Depending on the directory and the integration, it is possible to leave MFA on as well. You can look up specific instructions for your identity provider on the left hand side. If you don't see your directory listed, contact us at [email protected].
Note: Users authenticating through Foxpass must be provisioned inside of Foxpass. If you'd like to automatically provision users via a third party directory, check out Directory Sync.
Updated 15 days ago