Just wanted to say It's great

1

Hi, just wanted to say PrivacyIDEA is really great. As I’m a complete 2FA noob, it took me a while to understand the concepts and get it installed, but now it’s running nicely.

I’m using it to secure an Outlook Web Access installation in conjunction with Kemp Loadmaster.

Kemp Loadmaster presents a username/password screen, then sends a Radius request to PrivacyIdea. Privacyidea checks the username/password in the active directory via LDAP and answers with a radius challenge. Kemp then presents a form to enter the OTP value, sends the value to privacyidea (again via radius) and the user is authenticated.

2 Likes
2

Little update:

In the meantime, I’ve replaced Kemp Loadmaster with an own-rolled 2FA frontend running on Debian with nginx and PHP. The frontend directly talks to the Privacyidea API for OTP checking, so RADIUS is not needed anymore. Much nicer setup when talking directly to the Privacyidea API.

Then I added a self-service portal where users can make tokens for themselves (also via the Privacyidea API), works great, users are happy.

Privacyidea has been running rock solid so far, zero issues or hiccups.