Configuring Parallels RAS for Deepnet

List of Supported Tokens

• SafeID
• FlashID
• MobileID
• QuickID
• GridID
• SecureID (RSA)
• DigiPass (Vasco)

Connect to Deepnet Unified Authentication

1. In the RAS Console, select the Connection category and then click the Second Level Authentication tab.
2. In the Provider drop-down list, select Deepnet and click the Settings button. The Deepnet Properties dialog opens.
3. On the Connection tab page, enter the server name and port that you saved while setting up your Authentication Sever. By default, the port number is set to 8080. Click on Check Connection to test that your Authentication Server can be reached. You can choose to connect over SSL to your Deepnet server.
4. Click the Application tab page.
5. Select the application profile that will use Deepnet to authenticate its users. You can also create an application which will be added on the Deepnet server.
6. The Default Domain field enables you to choose the default domain user for authentication and when users are added. Any Deepnet user accounts imported or verified will be done so using this default domain.
7. Select the Use LDAP option when importing Deepnet user accounts and a group that contains other sub-groups.
8. Click the Import Deepnet user accounts… button to automatically add the specified users/groups to the Deepnet application.
9. Click the Verify Deepnet user account names button to check that all users in the Deepnet application are in the following format: \\domain\username. Users added in the format of username@domain will be automatically changed to the appropriate format and users without a domain will have the default domain assigned to them.
10. Click the Authentication tab page.
11. In the Mode drop-down list, select the mode how you want your users to be authenticated:
    • Mandatory for all users means that every user using the system must log in using two-factor authentication.
    • Create token for Domain Authenticated Users will allow RAS Application Server to automatically create software tokens for Domain Authenticated Users. Choose a token type from the drop down list. Note that this option only works with software tokens.
    • Use only for users with a Deepnet account will allow users that do not have a Deepnet account to use the system without have to login using two-factor authentication.
12. In the Allow Channels section, you can specify what channels are available to the user to activate the token or when requesting a Quick ID OTP. For example, if you select Email, the activation code can be sent only via email. If you select SMS, the activation code is sent via SMS.