13 Mar
2024
13 Mar
'24
1:54 p.m.
I'm in the process of configuring FreeRADIUS to integrate with our Okta SSO and LDAP. I'm working through the documentation and FR installed and LDAP configured so far. Right now I'm looking at the "Controlling user accounts" info and had a question about the user.access_attribute and the user.access-positive attributes.In the documentation it mentions if the attribute is present (set to true) I can set the access_positive = yes. My question is this... in Okta the attribute is "organizationalStatus" and it can be one of several things. For an active user it is set to ACTIVE. Does FR only see true or false? Can I set this so it sees the attribute from Okta and if it is anything other than ACTIVE, then set access_positive = no? Thanks