Is it possible to integrate google authenticator with PaloAlto for device admin authentication (two factor)?

[Gururaj]

Hi All,

Is it possible to integrate google authenticator with PaloAlto for device admin authentication (two factor)?

If possible, how to accomplish the same. Share if any document is available.

Thank you,

Guru

[jcostello]

This article is based on setting up Freeradius to use Google Authenticator - http://www.virtualvcp.com/tech-guides/36-vmware-view/194-securing-vmware-view-google-authenticator-a...

I have not done this as yet but as it is using RADIUS as the authentication method, it should work.

[wkey]

Just set this up and it's working great! If you want me to post a "How To", let me know!

Thanks!

[dreputi]

Hello Gururaj,

I haven't tested this myself but have come across this "PAN doesn't directly support Google Authentication method, but it can be done through FreeRADIUS server. Referred to http://www.virtualvcp.com/tech-guides/36-vmware-view/194-securing-vmware-view-google-authenticator-a...".

Regards,

Dileep

[kristian]

Hi wkey@atcc.org

Did you have any documentation on this?

The links in this tread is dead.

/kristian

[mivaldi]

Haven't tested it but this new link looks promising:

FreeRADIUS Google Dual Factor Authenticator - Supertechguy.com

[jdye06]

I use duosecurity. It is an amazing app And its free to try out for a few devices/users. THere is an integration guide on their website for Palo Alto Networks. The guide goes over integration for GlobalProtect, but you can use that same methodology for admin access.

[Darshil]

How to @wkey ? 

also is there any way to integrate with Windows Radius?