RADIUS TOTP Setup

[Nemanja Simpraga]

Greetings,

I am working on a TOTP authentication method setup with FreeRADIUS. For starters, I'd just like to generate a static user which uses TOTP (Time-based One-Time Passwords) to authenticate against the server.
My company uses BitWarden which has an integrated Authenticator feature which can generate TOTP tokens which you can use for passing MFA challenges and logging in.
Is it possible to have a user defined in RADIUS which is bound to a BitWarden token generator in some way? We do the same thing for accounts in our directory. The codes MSFT generates for their intended MSFT Auth mobile app I put into the BitWarden token generator to bind those accounts to the generator.
After that I can use the codes from BitWarden to pass the MFA challenge and sign in.

I've read about multiOTP and LinOTP but I can't seem to understand how they fit into this picture.
Am I going in the right direction with this? Is this BitWarden setup possible?

I am still quite new to FreeRADIUS, so bear with me. Thank you!

Best regards,


[cid:image001.png at 01D6A951.934B5080]
[cid:image002.png at 01D6A951.934B5080]<https://www.facebook.com/iOLAPInc/>       [cid:image003.png at 01D6A951.934B5080] <https://twitter.com/iolapinc>         [cid:image004.png at 01D6A951.934B5080] <https://www.linkedin.com/company/iolap/>         [cid:image005.png at 01D6A951.934B5080] <https://iolap.com/>
NEMANJA ŠIMPRAGA
System Network Administrator
[cid:image006.png at 01D6A951.934B5080]   nsimpraga at iolap.com<mailto:nsimpraga at iolap.com>
    +385 95 922 71 70







-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 4286 bytes
Desc: image001.png
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20201023/16fa5070/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 271 bytes
Desc: image002.png
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20201023/16fa5070/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 435 bytes
Desc: image003.png
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20201023/16fa5070/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 379 bytes
Desc: image004.png
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20201023/16fa5070/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 617 bytes
Desc: image005.png
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20201023/16fa5070/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 278 bytes
Desc: image006.png
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20201023/16fa5070/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 286 bytes
Desc: image007.png
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20201023/16fa5070/attachment-0006.png>