How to customize VIP PUSH notifications

Products

• VIP Service

Issue/Introduction

VIP Enterprise Gateway 9.8 and beyond has added the ability within the validation server settings to customize PUSH notifications sent to end-users. These customizations can include (but are not limited to) identifying information about the origin of the PUSH request, organizational information, help desk info, etc. Additionally, VIP Manager has the ability to customize PUSH notifications for non-RADIUS integrations such as custom applications, SAML (VIP Login), Entra ID, and OIDC.

Resolution

VIP Enterprise Gateway

In VIP Enterprise Gateway 9.8.x, a single option exists to update the PUSH message. This is designed for the referring URL, but could also be used to include a custom message:

In VIP Enterprise Gateway 9.9 or later, additional options are available. Edit the validation server and locate the VIP Push Authentication section: 

1. Select Yes to enable VIP Push authentication to send a VIP Push request to end-users during validation.
2. Enter a title to display in the VIP Push notification (32-characters max) 
3. Enter text to display in the VIP Push notification (256-character max)
4. Enter the destination name or URL of the service to display being accessed by the PUSH (such as Office 365, Palo Alto VPN, ADFS.example.com, or similar). 
5. Time (in seconds) the VIP Service will wait for the user to accept the push notification before timing out. This value must be between 10 and 300 seconds.
6. Select Yes to force additional local device authentication before accepting the PUSH (such as Face ID, PIN, pattern, password, or fingerprint). 

Sample PUSH message using above 9.9 settings:

VIP Manager

To customize the PUSH notifications for integrations that do not rely on RADIUS, please login to VIP Manager  and navigate to Policies > Account > Mobile Push Authentication Policy.

1. If Mobile PUSH is utilized by your organization, ensure that Enable Mobile Push is set to Yes.
2. Set Customize Mobile Push to Yes.
3. Enter the desired values under VIP Push Title (The text that users will see at the top of the VIP Access Push notification. Maximum 30 characters), VIP Push Text (The body of text that users will see in the PUSH Notificiation. Maximum 70 characters), and Remote Access Service Name/URL (The logon URL or profile, or other support resource for your end users. Maximum 60 characters).
4. Once the changes have been made click Save at the bottom of the page.