Supported authentication protocols for each authentication option
The following table shows the authentication protocols that are available for
each authentication option that
BlackBerry 2FA
supports.If your users are authenticating with one-time
password (OTP) tokens, the VPN server must be configured to authenticate them using PAP. OTPs
are not supported using MSCHAPv1, MSCHAPv2 or EAP-MSCHAP.
Authentication option | Supported authentication protocols |
|---|---|
Two-factor authentication with passive device password | PAP |
Two-factor authentication with active device password | PAP |
Two-factor authentication with enterprise password | MS-CHAP v1, MS-CHAP v2, PAP, EAP-MSCHAP |
Single factor authentication with enterprise password | MS-CHAP v1, MS-CHAP v2, PAP, EAP-MSCHAP |