Compatibility and Components
System Requirements
Prerequisites
Microsoft .NET Framework 4.8 must be installed on the same computer as the SafeNet Agent for NPS.
Operating Systems
The SafeNet Agent for NPS is supported on the following operating systems:
-
Windows Server 2016 (64-bit)
-
Windows Server 2019 (64-bit)
-
Windows Server 2022 (64-bit)
-
Windows Server 2025 (64-bit)
Authentication Management Platforms
-
STA
-
SAS PCE 3.9.1 and later
Authentication Protocols
The SafeNet Agent for NPS supports the following authentication protocols:
-
PAP
-
CHAP
-
MS-CHAP v2
The following restrictions apply when working in Challenge/ Response mode:
-
Tokens in Challenge/ Response mode are supported only for PAP.
-
GrIDSure tokens are supported only for PAP and MS CHAP v2. MS-CHAPv2 requires SAS PCE 3.9.1 or later.
Note
To use GrIDSure with the SafeNet Agent for NPS, the user must utilize an external GrIDSure service (for example Self-Service Portal).
Push OTP
When logging in to a website supporting the Push OTP function, the user enters the Username, leaves the Password field empty, and clicks the Login button. The user will then receive a prompt on their MobilePASS+ app, to accept or reject the logon request. On accepting the logon request, the user is logged in to the website.
The SafeNet Agent for NPS will support the Push OTP function with MobilePASS+ when working with the STA.
Note
-
High Push OTP utilization can lower the authentication throughput in the NPS.
-
To use PUSH OTP, ensure that the agent's server can connect with the PUSH Service. If you are using a proxy with the agent's server, add IP address of the PUSH Service in the proxy.
Supported Environment
The SafeNet Agent for NPS supports Push OTP with the following components:
-
Authenticator: MobilePASS+
-
Management Platform: SAS PCE/SPE 3.9.1 and later
Configuring RADIUS Client with Push OTP
When using Push OTP, we recommend the following settings in the RADIUS Client:
Multiple NPS servers |
Timeout: 60 seconds Retries: 1 |
| Single NPS server | Timeout: 20 seconds Retries: 3 |