Pulse Secure - Passing User/Pass From IVE to Secondary System

[Pawn]

I am having some issues figuring out how to configure the Pulse Authentication mechanism/Realm to pass a username/password from the Pulse Secure appliance to another system. In this particular instance we are looking to authenticate a user then pass them to an idp system for two-factor authentication and return back to the Pulse appliance.

Right now what is happening is the user/pass screen is being skipped altogether, forwarded to the two-factor server, and is returned for sign-in. I want to change this so I can take advantage of the SSO capabilities for Web/File authentication profiles.

Any suggestions?

[Filbert]

How do you have the authentication on the realm currently configured? What is the protocol used for the idp second factor, Radius, SAML, etc?

[flipPipe]

Using Radius as authentication (user+password+2nd factor) and LDAP as authorization.

[flipPipe]

Filbert, ignore my comment. Wrong post to answer. And i can't delete it

[lawpaughm]

How I have it setup:

Under the User Realm, enabled the Additional authentication server
Selected second authentication server that is configured for Radius
For the username and password, selected "Predefined as" and using and

[lawpaughm]

forum stripped out the end of my previous reply. Use "" for the username and "" for the password. No quotes.

[lawpaughm]

and again.

USERNAME and PASSWORD with left and right arrows around both.

[Pawn]

I am currently using SAML 2.0 for the IDP Authentication Realm with a SSO Method of POST.

When the appliance was first setup I remember we had a setting where a user could log in with a user/pass and it would forward them to the IDP where we would perform just the second factor only. I'm trying to get this back because it seems to make more sense.