Test the Sophos UTM integration

To test the integration using the Sophos web portal.

Topics

Flow diagrams

The following network diagram shows the configuration flows.

The detailed web sequence is listed below and shown in this diagram.

  1. User Logs in with Username/Password
  2. Gateway receives data and forwards via Radius to Okta RADIUS Server Agent
  3. Okta RADIUS Server Agent sends to Okta Identity Cloud
  4. Okta Identify Cloud Determines the Authentication source and responds or optionally forwards to on-prem directory agent
  5. Optional: Directory Agent sends Password to Directory
  6. Optional: Directory Confirms the password
  7. Optional: Directory Agent Confirms the password to Okta Identity Cloud
  8. Okta Identity Cloud evaluates the authentication policy and as required sends a message to the Okta RADIUS Server Agent to challenge the user for a factor
  9. The Okta RADIUS Server Agent relays the challenge message to the Gateway
  10. The Gateway displays a message to select a factor to the user
  11. User supplies the desired factor
  12. Gateway receives data and forwards via Radius to Okta RADIUS Server Agent
  13. Okta RADIUS Server Agent sends to Okta Identity Cloud
  14. Okta Identify Cloud evaluates the Choice and triggers the appropriate response (push message shown)
  15. Push message is received and Responded to by the user
  16. Success Message returned to the Okta RADIUS Server Agent
  17. Success Message returned to the gateway
  18. Connected

Test with the Web Portal

  1. Open the Sophos User Portal.

  2. Enter your username.

    Note: The username must be in the format you specified when you added the app in Okta in Part 2, above.

  3. Enter your password concatenated with your OTP value or keyword. Use the following examples for format:

    • Password1,123456
    • Password1,push
    • Password1,sms

    Note: The Sophos UTM appliance does not support a RADIUS challenge message. Credential concatenation is required.

  4. If any of the information is incorrect, the following screen displays.

  5. If you connected successfully, the following screen displays.