Guides
System Settings
Integrate RADIUS

Integrate RADIUS authentication

About RADIUS

Remote authentication Dial-In User Service (RADIUS) is a remote authentication mechanism based on the RADIUS protocol, primarily used for network access control. It provides Authentication, Authorization, and Accounting (AAA) functionalities.

How to configure

1
In the upper-right corner of any page in JumpServer, click .image
2

Navigate to System settings > Authentication > Radius.

3

In the Radius field, check to enable RADIUS authentication.

4

In the Host field, type the RADIUS server IP address or domain name, such as "172.16.10.180".

5

In the Port field, type the RADIUS server port number. The default is "1812".

6

In the Secret field, type the shared secret key between the JumpServer and the RADIUS server. It functions like a password, encrypting sensitive information in RADIUS requests and responses to ensure secure communication.

7

Optionally, In the OTP in RADIUS field, check to enable RADIUS as the MFA backend. For more information, see Enable RADIUS MFA backend.

8

In the Organization field, after authentication and creation, the user will be added to the selected organization.

9

Click Submit.

Enable RADIUS MFA backend

This subsection describes how to configure RADIUS authentication as one of the MFA backends.

1

Configure RADIUS authentication by following the Integrate RADIUS authentication guide.

2

In the OTP in RADIUS field, check to enable RADIUS as the MFA backend.

When a user’s MFA is enabled, they can choose RADIUS authentication type during login.

image
3

Click Submit.