Set up Nexus OTP as 2FA for VMware Horizon View

1. The administrator configures VMware Horizon View to use RADIUS Authentication.
2. The incoming authentication request is relayed over to the Digital Access Authentication Server via Radius
3. If the user exists, it then checks the token associated with the user for the expected PIN + One-time password.
4. Once the PIN + One-time password is verified against the user’s token and it is valid, it will then send an access accepted

• Deployed Digital Access, see Deploy Digital Access component
• Installed VMware Horizon View, see https://www.vmware.com/products/horizon.html

1. Log in to Digital Access Admin with an administrator account.

In step 3, enter the IP Address of the RADIUS Client (VMware Horizon View) and the Shared Secret Key.

1. In Digital Access Admin, go to Manage System.

2. Click RADIUS Configuration > Add RADIUS Client...

3. Enter General Settings and Attributes. Click the ?-sign for help.

4. Click Save.

Nexus TruID Synchronized is used as an example. Other Nexus OTP authentication methods are enabled in a similar way.

• In step 3, select Nexus Synchronized as method.
• When the default RADIUS replies are shown, click Next. You can also add your custom RADIUS replies or modify the default replies if required.

To add a new authentication method:

1. In Digital Access Admin, go to Manage System.
   
2. Click Authentication Methods.

3. Click Add authentication method..., select the desired method and click Next.

4. Enter Display Name, a unique name used in the system to identify the authentication method.
5. Select if the method shall be enabled and if it shall be visible in authentication menu.
   
6. Register Authentication Methods Server when applicable.
   
7. Make other configurations as needed for the selected authentication method. For more information , click the ?-sign. Click Next.
8. If needed, make settings in RADIUS Replies and Extended Properties.
9. Click Next and Finish.
10. Click Publish.
    

1. Log in to the VMware Horizon View administrator console on the VMware Horizon View connection server.

2. Expand View Configuration and select Servers. Highlight your VMware Horizon View connection server entry on the Connection Servers tab.

   

3. Click Edit.

4. In the Edit Connection Server Settings dialog box, go to the Authentication tab.
   

   

5. In the Advanced Authentication section:

   1. Select RADIUS from the 2-factor authentication drop-down list.

   2. Select Create New Authenticator from the Authenticator drop-down list.

   3. To enforce the RADIUS user names to match the user names in Active Directory, check Enforce 2-factor and Windows user name matching in the Advanced Authentication section.
6. In the Add RADIUS Authenticator dialog box, enter the details of the Digital Access RADIUS Server.
   

   

7. Click Next and enter the details of a secondary RADIUS authentication server if desired, then click Finish.

8. Click OK to apply the settings. The settings take effect immediately.

1. Start Nexus TruID that is installed on your laptop or smartphone - Enter your PIN to generate an OTP.
   
   

   

   

2. On a workstation with VMware Horizon View client installed, launch the application and enter the IP address or DNS name of the VMware Horizon View Connection server. Click Connect. 
3. When prompted, enter your Digital Access user name and one-time password, and click Login.
   

   

4. If the Digital Access authentication is successful, continue the logon process by entering the required Active Directory credentials.