NetScaler Gateway with two-way authentication using Safenet server-as-a-service and the provider requires UPN (username@domain.com) for the user name.

Note: Using Receiver on a Windows based mobile device, the UI has user name, password, and token, and works fine with the configuration.

Now iOS Receiver UI has user name, password, domain and token where the domain field is mandatory (cannot leave it blank) and fails to authenticate. The domain information is sent along with the UPN and causes the authentication to fail.

Monitoring the debug log shows the rejection from the RADIUS server.

To resolve this issue ensure that percentage symbol is not used in the token.

Problem Cause

The RADIUS was not set to "PAP" and a set token with the value of "Qwert1234%" was used.

CTX125364 - How to Configure Dual Authentication on Access Gateway Enterprise Edition to Use with iPhone and iPad