3.9 NetIQ Advanced Authentication Configuration

Path: Port 8443 Filr Admin Console System > NetIQ Advanced Authentication

This functionality is only available on Filr Advanced Edition and Power Advanced Edition. Before you configure the advanced authentication options, you must do the following:

Ensure that all the Filr clients are updated with the latest patch installed.
Configure an OAuth2 Event in the Advanced Authentication server using the Advanced Authentication Administrative Portal to automatically generate the client ID and the client secret. See Using Multi-Factor Advanced Authentication with Filr in the Filr 5.0: Maintenance Best Practices Guide.

You must specify these client ID and client secret values in the NetIQ Advanced Authentication Configuration dialog. See Table 3-7.

Table 3-7 Using the NetIQ Advanced Authentication Configuration dialog

Field, Option, or Button	Information and/or Action
Enable Multi-factor Authentication	Enable multi-factor authentication for internal LDAP users and/or external users to access Filr. Specify the configuration information for the following fields.
Internal LDAP users	Select this checkbox to enable multi-factor authentication for internal LDAP users. This checkbox is enabled only for Filr Advanced Edition.
External users	Select this checkbox to enable multi-factor authentication for external users. This checkbox is enabled only for Power Advanced Edition.
Server URL	The access URL of the Advanced Authentication server that you want to use for multi-factor authentication.
Client ID	The client ID that is automatically generated when you use the Advanced Authentication Administrative Portal to create an OAuth2 event. You can copy the ID from the portal and paste it here.
Client Secret	The client secret key that is automatically generated when you use the Advanced Authentication Administrative Portal to create an OAuth2 event. You can copy the secret key from the portal and paste it here.
Tenant Name	Specify the tenant name. The default value is TOP and supports single tenancy.
Test connection button	Click this to test the connection between Filr and the Advanced Authentication server.
Redirect URIs	Copy the Filr URIs, that are displayed in this field. This is appended with an additional URI for AAF to work with the New Filr Web Client. When you create an OAuth2 event in the Advanced Authentication Administration Portal, you must paste the copied URIs in the Redirect URIs option to enable users to be redirected to the Filr URI after successful authentication.
OK button	Click this to save your changes.
Cancel button	Click this to cancel the changes you have made.