This feature works only when authenticating through FreeRADIUS agent since RADIUS attributes defined for users and groups are returned to FreeRADIUS agents only.

You can block and reject RADIUS authentication if no RADIUS return attribute is defined for the user or group.

When authenticating with a RADIUS token, SafeNet Trusted Access (STA) also passes RADIUS attributes to the RADIUS client that were received from an external RADIUS server. This is beneficial for authentication requests that may go to a third-party authentication service and then return through STA. If this feature is applied, authentication request to STA will check the combined list of attributes (RADIUS token attributes and STA-defined attributes) to block authentication requests.

To block RADIUS authentication:

1. On the STA Token Management console, select Comms > Authentication Processing > Block RADIUS Authentication Without Attributes.

2. Select Block RADIUS authentication without return attribute.

   

3. Click Apply.