> For the complete documentation index, see [llms.txt](https://docs.mirketsecurity.com/mirket-help-center/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.mirketsecurity.com/mirket-help-center/mirket-help-center/mirket-saas-platform/integrations/ivanti-pulse-connect-integration-via-radius.md).

# Ivanti Pulse Connect Integration via Radius

General Overview

This guide explains the instructions on configuring Mirket multi-factor authentication for Ivanti Pulse Connect . Prior configuration and deployment of Ivanti Pulse Connect are required before setting up MFA with Mirket.

Ivanti Pulse Connect offers various MFA configuration modes. In this integration, we've configured RADIUS authentication with Mirket.

## Configuring Pulse Secure

* Log in to the Ivanti Connect Secure admin portal with an administrative account, then navigate to **Authentication** > **Auth Servers**.
* From the list, select **RADIUS Server** and click **New Server**.
* To define the new RADIUS server, set the following configurations.

| **Name**                | <p>Set the name of the RADIUS server.</p><p>For example, <strong>Mirket</strong>.</p>                               |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------- |
| **RADIUS Server**       | <p>Set to the Name or IP address of the Mirket Radius Gateway.</p><p>For example, <strong>10.10.10.180</strong></p> |
| **Authentication Port** | Set to **1812**.                                                                                                    |
| **Shared Secret**       | Enter the RADIUS shared secret key for the Mirket Radius Gateway                                                    |
| **Timeout**             | Set to **60**.                                                                                                      |
| **Retries**             | Set to **1**.                                                                                                       |

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2F8sR3K6boCk64qmuV5GzY%2FScreenshot%202025-12-18%20at%2019.51.15.png?alt=media&amp;token=6de79894-b7aa-4d1f-9270-d00421bb07e5" alt=""><figcaption></figcaption></figure>

* Optional. If you require and have a backup server, repeat the above configuration settings.
* **Save** your changes.
* From your newly created RADIUS server settings, scroll down to the **Custom RADIUS Rules** section and click **New RADIUS Rule…**
* Set the following configurations.

| **Name**                 | <p>Enter a unique name.</p><p>For example, <strong>Mirket Challenge Rule</strong>.</p>                                                                                                                                                                                       |
| ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Response Packet Type** | Set to **Access Challenge**.                                                                                                                                                                                                                                                 |
| **Attribute Criteria**   | <p>Set the following attribute criteria:</p><ul><li><strong>RADIUS Attribute</strong> – Set to <strong>Reply-Message (18)</strong></li><li><strong>Operand</strong> – Set to <strong>matches the expression</strong></li><li><strong>Value</strong> – Leave blank.</li></ul> |
| **Then take action**     | Set to **show Generic Login page**                                                                                                                                                                                                                                           |

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FXIc1hxZ4baXfgR3FO1eU%2FScreenshot%202025-12-18%20at%2019.54.26.png?alt=media&amp;token=bd3a4d60-9d57-4ece-92a6-2644fdf4f5d9" alt=""><figcaption></figcaption></figure>

* On the Ivanti Connect Secure admin portal, navigate to **Users** > **User Realms**.
* Click the **New User Realm** link and set the following configurations.

| **Name**                     | <p>Enter a Unique name.</p><p>For example, <strong>Mirket-RADIUS</strong>.</p> |
| ---------------------------- | ------------------------------------------------------------------------------ |
| **Authentication**           | Set to **Mirket**.                                                             |
| **User/Directory Attribute** | Set to **Same as Above**.                                                      |
| **Accounting**               | Set to **None**.                                                               |
| **Device Attributes**        | Set to **None**.                                                               |

* **Save** your changes.

* Optional. Navigate to **Role Mapping** from the top menu, click **New Rule** and set the following configurations.

  | **Rule based on**           | Set to **Username**.                                                            |
  | --------------------------- | ------------------------------------------------------------------------------- |
  | **Name**                    | <p>Enter a unique name.</p><p>For example, <strong>Mirket-Mapping</strong>.</p> |
  | **Rule: if username**       | Set to **is** and type required usernames or use the wildcard character \*.     |
  | **then assign these roles** | Select the roles to assign.                                                     |

* **Save** your changes

* Navigate to **Authentication** > **Signing In** > **Sign-in Policies**.

* Click the link for the sign-in policy that you want to modify

* In the Authentication realm section, choose **User picks from a list of authentication realms**. Then, in the Available realms box on the left, select the user realm you just configured and click **Add** to move it to the Selected realms box on the right.

* **Save** your changes.

  <br>

## Configure Mirket

### Add Ivanti Pulse Connect  as a Radius Client in Mirket&#x20;

Before starting, ensure that you have installed Mirket Radius Gateway from the **Configuration** > **Gateway.** To add a Radius Gateway to the Mirket, follow these steps:

* Go to **Configuration** > **Gateway** and click on the **Add Radius Gateway** button.
* On the displayed screen, enter a name for your Radius Gateway in the **Name** field.
* Enter the SAM value of the gateway in the **Sam Value** field. In Mirket, user identification is done using the SAM (Security Account Manager) name. This is preferred over the standard username. This username is used for authentication and access controls.
* Enter the IP address of the server where the gateway is installed in the **Host IP Address** field.
* Enter the authentication port value you set for the gateway in the **Auth Port** field. The default value is 1812.
* Enter the accounting port value you specified for the gateway in the **Acc Port** field. The default value is 1813. **Note**: After completing these fields, you must create a **RADIUS client** for the newly created RADIUS Gateway.
* Click on the **Add Radius Client** option at the bottom of the displayed screen.
* Enter a name for your Radius Client in the **Radius Client** field.
* Enter the IP address of the Ivanti Pulse Connect  that will communicate with the gateway in the **IP Address** field.
* Enter the secret key that the client will communicate with the gateway in the **Secret Key** field.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FFQRip3MoLETV17kYpOAm%2FRGAdd.png?alt=media&amp;token=f19b1024-3846-4b6e-ab92-4508875d3991" alt="" width="563"><figcaption></figcaption></figure>

* Click on the **Save** button to confirm the settings.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FAUfc9froWmf2e1ObOigm%2FRG.png?alt=media&amp;token=0ef86424-cebc-4ae3-b30d-d9acb7c09c5f" alt=""><figcaption></figcaption></figure>

### Configuring Radius Gateway

* After creating the Radius Gateway, click on the **Download > Config** from the menu on the right side of the gateway.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FA3EDj7G4xT6t09uoSyTw%2FRGDownload.png?alt=media&amp;token=1990d477-394f-437d-ae35-b1c2828af55a" alt=""><figcaption></figcaption></figure>

* This option will generate a script related to the gateway, which will be displayed from the RADIUS Setup config file. The config file will automatically begin downloading once this option is selected.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2F0Jlzbxukpodt1NxoUWct%2FRGConfig.png?alt=media&amp;token=7c21d1c2-3ef9-4099-884e-0bb4e430d6da" alt="" width="563"><figcaption></figcaption></figure>

* Replace the existing config file in the `"C:\MirketRadius"` directory with the downloaded file. Alternatively, copy the displayed script and paste it into the config file in `"C:\MirketRadius"`.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FYsMVAEqt0dUnQ7aWNsQQ%2FRGDirectory.png?alt=media&amp;token=01858387-1169-42c2-ba60-cd9ce5036926" alt="" width="479"><figcaption></figcaption></figure>

* Then, restart the **Mirket Radius Service**.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FfLX2FpfkbKYnUkWqHbBH%2FRGService.png?alt=media&amp;token=aab3abe8-bdf7-44a4-9b28-065af8fb372d" alt=""><figcaption></figcaption></figure>

You can check whether the Radius Gateway you created is active by navigating to **Configuration** > **Gateway**.

### User and Group configuration on Mirket

To set up multifactor authentication, make sure you have at least one **user** or **group** in Mirket.

If it is preferred to use a local user, you can first create a local group and then create a local user and make the user a member of the group. Alternatively, you can create a local user without creating a local group.

* [Create a Local Group to add users manually.](/mirket-help-center/mirket-help-center/mirket-saas-platform/mirket-portal/groups.md)
* [Add local Mirket users manually.](/mirket-help-center/mirket-help-center/mirket-saas-platform/mirket-portal/users/local-users.md)

If it is preferred to use LDAP users, the priority External Source is created by pulling users from Active Directory or OpenLDAP in Mirket. **Note**: Before proceeding, ensure that you have installed Mirket LDAP Gateway. ([Refer to create LDAP Gateway.](/mirket-help-center/mirket-help-center/mirket-saas-platform/mirket-portal/connector/ldap-gateways.md))

* [Create an External Source to include LDAP users.](/mirket-help-center/mirket-help-center/mirket-saas-platform/mirket-portal/external-sources/active-directory.md)
* [Sync users from an external user database.](/mirket-help-center/mirket-help-center/mirket-saas-platform/mirket-portal/users/ldap-users.md)

### Add a Radius Rule to Mirket

Radius Rules define user access to resources and the authentication methods available (such as SMS, Approve / Deny, OTP, etc.).

First, you should follow these steps:

* Go to **Configuration > Radius Rules**.
* Click on the **Add Radius Rule** button.
* On the displayed screen, enter a name for the rule in the **Name** field.
* Enter the rule description in the **Description** field.
* Select the Radius Client to which the rule will apply from the **Radius Client** dropdown list.
* Enter the source IP addresses to which the rule will apply in the **Source Adress** field.
* Select the source countries where the rule will be applied from the Source Country dropdown list.
* Click on the **Next** button.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FKREEfwZtOz3W4AhRQE0Q%2FRadiusRuleAdd.png?alt=media&amp;token=13331afd-8e1a-4db9-85c5-8829276fead2" alt="" width="563"><figcaption></figcaption></figure>

* Specify whether the rule will be applied to a user or a group.
* After specifying, click on the **Next** button.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FI6N93Xsg2eEV1QtZnSJ2%2FRadiusRuleAdd2.png?alt=media&amp;token=3aaaa4f2-99d7-4b99-ab64-52b8a4c4dabb" alt="" width="563"><figcaption></figcaption></figure>

* Select the users or groups to which the rule will apply. Transfer your selections to the **Selected Users/Groups** table by clicking the arrow icon next to the **Available Users/Groups** table.
* Click on the **Next** button.

<div><figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FzOFMfP7a3N72BCjWgS6F%2FRadiusRuleAdd31.png?alt=media&amp;token=9313a78a-8ab0-4fdf-bffc-ce93a1beab23" alt=""><figcaption></figcaption></figure> <figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FgysyYXybxcmP3dkoTWl4%2FRadiusRuleAdd32.png?alt=media&amp;token=7e9109d0-40fb-4015-be52-b1fbe0a4590a" alt=""><figcaption></figcaption></figure></div>

* Select the time period when the rule will run.
  * **All**: The rule will run every day.
  * **Recurring**: The rule will run on the specified days and times.
  * **One Time**: The rule will run within the date range you specify.
* After selecting, click on the **Next** button.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FmbddhmoSf4psJigpwGtl%2FRadiusRuleAdd4.png?alt=media&amp;token=124dd812-02c4-48fa-90d6-34ddd6fc631e" alt="" width="563"><figcaption></figcaption></figure>

* Specify whether the user or group will be granted access based on the rule in the **Action** field.
* Select the authentication provider to which the rule will apply from the **Auth Method** dropdown list.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FUNeonzmNV154IB3y0Gta%2FRadiusRuleAdd5.png?alt=media&amp;token=6db67697-954a-4f28-9d6a-63adef3af303" alt="" width="563"><figcaption></figcaption></figure>

* Click on **Save** to confirm the settings.

<figure><img src="https://2335748515-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXMCDrulGJr20rbbYKJ91%2Fuploads%2FcxOxiA8O6sGEk9EfpLEF%2FRadiusRule.png?alt=media&amp;token=ee7c674b-f8a8-4422-a8e2-fb1f6da6ff97" alt=""><figcaption></figcaption></figure>

### Test the Integration

To validate the integration between Mirket MFA and your Pulse Secure, perform authentication using a mobile token on your mobile device. For RADIUS resources, available authentication methods include Approve/Deny authentication.

In this example, we illustrate the use of the Approve/Deny authentication method.

* Launch Pulse Secure Connect.
* Enter your Mirket username and your password.
* Click on **Connect**. Then, select the '**Approve**' option(found in the Mirket mobile app) immediately and make sure it doesn't time out.

#### Related Topics

[Radius Clients](/mirket-help-center/mirket-help-center/mirket-old-versions-op/mirket-admin-panel/rules/radius-rules/radius-clients.md)

[Radius Rules](/mirket-help-center/mirket-help-center/mirket-old-versions-op/mirket-admin-panel/rules/radius-rules.md)

[Local Group Configuration](/mirket-help-center/mirket-help-center/mirket-old-versions-op/mirket-admin-panel/user-management/local-group-configuration.md)

[Local Users Configuration](/mirket-help-center/mirket-help-center/mirket-old-versions-op/mirket-admin-panel/user-management/local-users-configuration.md)

[LDAP Group Configuration](/mirket-help-center/mirket-help-center/mirket-old-versions-op/mirket-admin-panel/user-management/ldap-group-configuration.md)

[LDAP Users](/mirket-help-center/mirket-help-center/mirket-old-versions-op/mirket-admin-panel/user-management/ldap-users.md)