Cisco Systems Servers Manuale Utente

This section describes Cisco Secure ACS support for token servers that provide a 
standard RADIUS interface.

Cisco Secure ACS can support token servers using the RADIUS server built into 
the token server. Rather than using the vendor’s proprietary API, 
Cisco Secure ACS sends standard RADIUS authentication requests to the 
RADIUS authentication port on the token server. The token servers supported 
through their RADIUS servers are as follows:

 ActivCard

 CRYPTOCard

 Vasco

You can create multiple instances of each of these token server types in 
Cisco Secure ACS. For information about configuring Cisco Secure ACS to 
authenticate users with one of these token servers, see the 

.

Cisco Secure ACS also supports any token server that is a RADIUS server 
compliant with IETF RFC 2865. So, in addition to the RADIUS-enabled token 
server vendors explicitly supported, this enables you to use any token server that 
supports RADIUS-based authentication.

Although Cisco Secure ACS supports mapping users authenticated by a 
RADIUS-enabled token server to a single group, Cisco Secure ACS also provides 
a means for specifying a user’s group assignment in the RADIUS response from 
the RADIUS-enabled token server. For more information, see the 

.