Starling Two-Factor Authentication Hosted - RADIUS Agent Administrator Guide

Adding clients

You can add new RADIUS clients to be authenticated through Starling Two-Factor authentication.

To add client details

1. On the Starling Two-Factor RADIUS Agent configuration page, click Client Settings.

   The Client Settings window is displayed.

2. Click Add and provide the following details:
   • IP address: IP address or the range of IP addresses from which the Starling Two-Factor RADIUS Agent accepts authentication requests. For example:
     • 192.168.70.9: In this case, the Starling Two-Factor RADIUS Agent allows authentication requests only from this IP address.
     • 192.168.70.0: If a subnet mask is entered in the Subnet Mask field, for example, 255.255.255.0, then Starling Two-Factor RADIUS Agent allows authentication requests from any IP address on the 192.168.70.0 subnet.
   • Subnet mask (Optional): If you want to specify a range of IP addresses, you have to enter the subnet mask.

     NOTE: If an invalid IP address or subnet mask is configured, authentication requests do not reach the Starling Two-Factor RADIUS Agent server and you cannot access the required resources.

   • Shared secret: The key that the RADIUS client uses when attempting to establish a connection with the Starling Two-Factor RADIUS Agent. The client and Starling Two-Factor RADIUS Agent must have the same shared secret. The shared secret helps to maintain the security between the Starling Two-Factor RADIUS Agent server and the RADIUS client.
3. Click Add.

4. On the Client Settings window that is displayed, click Add to add more clients, or click Save Settings to apply the client settings changes.

   A message is displayed confirming that the clients settings are updated.

Removing clients

You can remove RADIUS clients that do not need to be authenticated through Starling Two-Factor authentication.

To remove a client

1. On the Starling Two-Factor RADIUS Agent configuration page, click Client Settings.

   The Client Settings window with the list of clients added for authentication is displayed.

2. Select the required client IP address or subnet mask, and click Remove.

   A message is displayed prompting you to confirm if you want to remove the specified client.

3. Click Yes.

   The Client Settings window with the specified client removed is displayed.

4. Click Save Settings to apply the client settings changes.

   A message is displayed confirming that client settings are updated.

Updating clients

You can update the IP address, subnet mask, or shared secret details for the RADIUS clients that are added to be authenticated through Starling Two-Factor authentication.

To update the client details

1. On the Starling Two-Factor RADIUS Agent configuration page, click Client Settings.

   The Client Settings window with the list of clients added for authentication is displayed.

2. Select the required client IP address or subnet mask, and click Update.

   The Update RADIUS Client window with the details of the selected client is displayed.

3. Update the required details, and click Update.

   The Client Settings window with the updated client details is displayed.

4. Click Save Settings to apply the updated client settings.

   A message is displayed confirming that the clients settings are updated.

Configuring Starling Two-Factor Radius Agent for secondary authentication

You can integrate any applications which require two-factor authentication in your organization with the Starling Two-Factor RADIUS Agent server. To integrate the application with the RADIUS Agent server you must perform the following configurations in the applications.

To configure Starling Two-Factor RADIUS Agent in the application

1. Launch the application, which requires RADIUS Agent server integration.
2. Configure the Starling Two-Factor RADIUS Agent authenticator into the application by providing the following values:
   • RADIUS server IP address
   • Port number
   • Shared secret key

For more information about integration, see the documentation for the application, which is being integrated with RADIUS Agent server.