On Jun 2, 2016, at 1:26 PM, Aaron Smith <Aaron.Smith@kzoo.edu> wrote:
SecureId is pretty expensive, and it looks like Yubikey is hardware only.
But awesome.
Our users prefer a software based token.
Meh. Honestly, with NFC/USB, using a hardware token is simpler, press the button and it all just works.
SMSOtp might work, but although MOST of our users prefer software tokens, we do have some that prefer the hardware KT type tokens.
You shouldn't have any issues getting it working with Google authenticator. The only time you have difficulty is when there needs to be more of a conversation.
I've been working on this for a while now, trying a ton of different freeradius permutations and have pretty much decided that it's impossible to use Freeradius
Sounds like a protocol limitation to me. So more accurately it's not possible to use RADIUS or EAP authentication with the OTP solutions you're trying because they're fundamentally incompatible? -Arran