PingOne RADIUS Gateway with MS-CHAP v2 only works in no-challenge mode.
Your users can enter a one-time passcode (OTP) with their username when signing on in no-challenge mode. To do this, a custom separator should be added to the Network Policy Server (NPS). The same custom separator must also be configured in the DaVinci flow. For information, see the PingOne RADIUS gateway connector documentation.
For example, adding a comma separator enables the user to enter the OTP in the
format <username>,OTP
. For user John
,
OTP 123456
is entered as John,123456
.
To configure the NPS to enable users to enter an OTP together with their username: