As you might be already aware that RADIUS only supports password or passcode authentication. It is not possible to use RADIUS to implement some modern or advanced authentication methods such as fingerprint, face recognition, FIDO keys, etc. If you want to use those authentication methods in a RADIUS-based MFA logon process, then you will need to use the DeepNet Authenticator.

Deepnet Authenticator (DNA) is a cross-platform user authentication app that supports multi-factor authentication (MFA). Currently, DNA is available on the following operating systems
  • Windows (WPF) 
  • Windows (UWP)
  • MacOS
  • iOS
  • Android

And, it supports the following authentication methods:


Windows (WPF)Windows (UWP)MacOSiOSAndroid
One-Time Password (OTP)
On-Demand Password




  • by SMS
  • by Email
  • by Call
  • by Grid on Screen
Challenge/Response




  • GridID Card
  • MobileID App
  • Security Questions
Security Devices




  • DevicePass
  • Access Card
x✓(NFC Required)
  • FIDO/U2F
xx✓(NFC Required)
  • FIDO2 
xxxx
Biometric Authentication




  • Face Recognition
xx
  • Fingerprint 
xxxx
  • Keystroke
xx
Mutual Authentication




  • Site Stamp
Local Authentication

Difference between Deepnet MobileID and Deepnet Authenticator

Deepnet MobileID is an app that supports OTP and OOBA only. It is an app used to generate OTP codes, or accept OOBA push authentication requests. 

Deepnet Authenticator (DNA) is an app that supports all types of authentication methods.  More importantly, DNA is an authentication console, not an OTP generator. 

Follow the steps below to set up a system that uses DeepNet Authenticator in a RADIUS-based MFA logon process.

  • No labels