Skip to content

Mideye Integrations: RADIUS, ADFS & Mideye Auth API

Mideye Server provides multi-factor authentication through two interfaces: RADIUS for network devices and infrastructure, and the Mideye Auth API for custom applications. Both interfaces authenticate users against a user repository, Active Directory, LDAP, Entra ID, or the local Mideye database.

User RepositoriesMideye ServerRADIUS ClientsAPI ClientsActive Directory / LDAPMicrosoft Entra IDLocal DatabaseRADIUS InterfaceUsername + password → MFAMideye Auth APIPhone number → MFAVPN / FirewallFortiGate, Palo Alto,Cisco, Check PointWindowsADFS, RDS, NPSNetwork AccessSSH, PAMIdentity ProvidersKeycloakCustom ApplicationsWeb apps, portals User lookupUser lookupUser lookup RADIUSRADIUSRADIUSHTTPSHTTPS

Systems that send username + password to Mideye via RADIUS. Mideye validates credentials against the configured user repository and adds a second factor (push, SMS, or OTP).

| Platform | Category | Guide | |----------|----------|-------| | FortiGate SSL VPN | VPN / Firewall | FortiGate | | Palo Alto GlobalProtect | VPN / Firewall | GlobalProtect | | Cisco AnyConnect | VPN / Firewall | AnyConnect | | Cisco AnyConnect (FMC) | VPN / Firewall | AnyConnect FMC | | Check Point VPN | VPN / Firewall | Check Point | | Pulse Connect Secure | VPN / Firewall | Pulse Secure | | Citrix ADC (NetScaler) | Load Balancer / Gateway | Citrix ADC | | Microsoft ADFS | Windows / Identity | ADFS Module | | Microsoft NPS | Windows / RADIUS Proxy | NPS | | Windows RDS | Windows / Remote Desktop | RDS with Touch | | Windows VPN (RRAS) | Windows / VPN | Windows VPN | | Linux PAM / SSH | Server Access | PAM |

Systems that send a phone number to Mideye via HTTPS. Mideye sends a push notification or SMS magic link to the user's phone, no password needed.

| Platform | Category | Guide | |----------|----------|-------| | Keycloak | Identity Provider | Keycloak | | Custom Applications | Web / Mobile Apps | Mideye Auth API | | Example Code | Python, Java, C#, Go | Examples |


| Your situation | Interface | Start here | |----------------|-----------|------------| | VPN, firewall, or network equipment | RADIUS | RADIUS integrations | | Windows Server, ADFS, or RDS | RADIUS | Windows integrations | | Custom app or passwordless needs | API | API integrations | | Identity provider (Keycloak, etc.) | API | Keycloak |


Mideye Server looks up users and validates passwords against one or more user repositories. This is a Mideye Server configuration, not an integration you set up on the external system.

| Repository | Protocol | Documentation | |------------|----------|---------------| | Active Directory | LDAP / LDAPS | LDAP Profile | | OpenLDAP, eDirectory, Sun DS, Lotus Domino | LDAP / LDAPS | LDAP Profile | | Microsoft Entra ID (Azure AD) | Microsoft Graph API | Entra ID | | Local Mideye Database | Internal | Users and Tokens |


Before configuring integrations, review the network and port requirements for firewall rules and protocol prerequisites.