Enterprise Connect

Install Windows RADIUS proxy

Installing the RADIUS proxy is an intuitive process that utilizes an Installation Wizard to assist you. You must complete the prerequisites before following the below steps.

Install the ForgeRock RADIUS proxy on Windows
  1. Right-click on the ForgeRock Radius Agent.exe file and select Run as administrator.

    install radius proxy run as admin

    The installation wizard opens.

    The file name of the RADIUS proxy is subject to change from the download. If you do not run the executable as an administrator, the installation will fail.

  2. On the Welcome screen, click Next.

    install radius proxy welcome screen
  3. On the Custom Setup screen, click Next.

    install radius proxy custom setup next screen
  4. On the Destination Folder screen, click Next.

    install radius proxy dest folder next screen
  5. On the Logon Information screen, enter the service account user credentials for the service account using the ForgeRock RADIUS service. Make sure the syntax for the username is Domain\Username. For more information on the privileges required for this account, refer to prerequisites.

    install radius proxy user creds screen

    If the machine is not a part of a domain, then the domain for the service account user is the machine name.

  6. On the Agent Parameters page, configure the required settings:

    • Enter the relevant URL. For example, http://<tenant-env-fqdn>/openam.

    • Enter the relevant Realm. For example, /alpha.

      Ensure to prefix the realm with /.

      If the account does not have sufficient privileges or if the credentials are incorrect, an error screen might be presented during the final stages of the installation.

      install radius proxy service account error
    • Enter the Journey field for the selected authentication method:

      • Push (for example, push-radius)

        For an example of a push journey (used with the ForgeRock Authenticator application), refer to Example of a push journey.

      • TOTP (for example, otp-radius)

        For an example of a TOTP/OATH journey (used with the ForgeRock Authenticator application), refer to Example of a TOTP/OATH journey.

        Your RADIUS client must be able to support the exchange of the TOTPs from ForgeRock journey > RADIUS proxy > RADIUS client and vice versa for the TOTP (OATH/Offline OTP) method to work.

      • Simple (for example, simple-radius)

        Example of simple journey in Identity Cloud
        install radius proxy identity cloud simple journey
        Figure 1. Simple authentication journey in Identity Cloud
        Example of simple journey in Access Management
        install radius proxy am simple journey
        Figure 2. Simple authentication journey in Access Management
You can only configure one journey and one authenticator method. The journey entered will correspond to the authenticator method selected in subsequent steps.
radius proxy agent parameters screen
  1. Review the default values in the Radius Server section of the Agent Parameters screen, and if necessary, change them.

    1. The IP Address field can consist of two values; the default value127.0.0.1 (localhost) and

      Change the IP Address to to allow the Windows RADIUS proxy to listen on all interfaces.

    2. The default Port is 1812 (via UDP). Change if necessary.

    3. Input a value into the Secret field that is strong and complex. Take note of the secret, as it might be needed when configuring your RADIUS client to the RADIUS proxy. The Secret value appears to be pre-populated, but it is not.

      Ensure that the RADIUS client you are configuring with the Windows RADIUS proxy allows the characters in the Secret field. For instance, some RADIUS clients can not process special characters.

  2. Review the settings in the Authenticator section of the Agent Parameters screen and verify they match the authenticator type and method you configured. If necessary, you can correct the Authenticator configuration by selecting the correct settings from the drop-down lists.

  3. To begin the installation, click Install.

    install radius proxy install screen

    A status bar is displayed during the installation process.

  4. To exit the installation wizard, click Finish.

Once you have completed the installation of the RADIUS proxy, proceed to the post-installation steps.

Copyright © 2010-2023 ForgeRock, all rights reserved.