CA PAM :: Is it possible to combine MFA as a single entity?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When logging into PAM, we have LDAP+RADIUS as multi-factor authentication (MFA).

We are using the same password for both LDAP and RADIUS, since RADIUS will authenticate the credentials from Active Directory (AD).

Is it possible to provide an alternative that allows us to bypass entering the RADIUS password? Users find it frustrating to input the same password twice..!

Environment

All supported versions of CA PAM

Resolution

The MFA configuration itself can't be combined into a single Authentication mode, in here since the RADIUS and LDAP password is the same to avoid the password from being provided multiple times, you can use only RADIUS as the authentication method.