September 4, 2026

Configuring authentication in DMZ

Unified Access Gateway supports configuration of different types of Authentication methods for Horizon and Web Reverse Proxy (WRP) edge services.

Authentication Method	Description
X.509 Certificate authentication	Applicable for Horizon and WRP
RADIUS authentication	Applicable for Horizon
RSA SecurID authentication	Applicable for Horizon
OpenID Connect (OIDC)	Applicable for Horizon
SAML Authentication	Applicable for Horizon

If none of these authentication is configured, Unified Access Gateway will act as a passthrough reverse proxy. Users are prompted for any authentication based on the backend server configuration.

Note

Only one of the two-factor user authentication methods can be specified for an Edge Service. In addition, Unified Access Gateway allows fallback authentication with a combination of Smart Card certificates and RADIUS authentication. Initially, Unified Access Gateway attempts to authenticate using Smart Card. If a certificate is not found, it will fall back to RADIUS authentication.
In case of X.509 Certificate, RADIUS, RSA SecurID and OIDC, you can modify a previously configured authentication setting. However, the authentication setting cannot be disabled or deleted. For example, if you have configured RADIUS authentication previously, you cannot disable the RADIUS setting. Instead, the authentication method can be changed to a different method such as Passthrough, using the Edge Service setting.

Was this page helpful?

Configuring authentication in DMZ

Provide feedback for this topic

Write your review