While I have Remote Desktop Gateway currently working when using itself as the authenticator, I want to potentially implement a 2 factor authentication which would require the use of a 3rd party Radius server installed elsewhere.
PhoneFactor is a Radius server and I can get it to work by itself and for other items that use RADIUS authentication, but when the "TS GATEWAY AUTHORIZATION POLICY" is set to "Forward requests to the following remote RADIUS server group for authentication" it fails. (I have my RADIUS server defined in the "TS GATEWAY SERVER GROUP")
I am working with PhoneFactor to see if we can get it to work, but was just curious as to what the requirements are for servers in the "TS GATEWAY SERVER GROUP"
I do see the RADIUS request hit the 3rd party RADIUS server, but it complains of an "invalid access request" and drops the packets.
Do the remote RADIUS servers have to be a Microsoft NPS server or can it be any kind of RADIUS server.