RADIUS Accounting Messages

RADIUS accounting uses two types of accounting messages:

• Accounting-Request
• Accounting-Response

An Accounting-Request can send one of three request types specified by the Status-Type attribute:

This request	Is sent
Start	When a user logs in.
Stop	When a user logs out.
Interim-Update	Periodically during a user login session.

Accounting messages follow the RADIUS standard specified by RFC 2866. Each message contains a list of attributes and an authenticator that is validated by a shared secret.

These SSO-relevant attributes are set in Accounting-Requests:

Status-Type	Type of accounting request (Start, Stop, or Interim-Update)
User-Name	User’s login name. The format is not specified by the RFC and can be a simple login name or a string with various values such as login name, domain, or distinguished name (DN).
Framed-IP-Address	User's IP address. If NAT is used, this must be the user’s internal IP address.
Calling-Station-ID	String representation of the user's IP address, used by some appliances such as SMA.
Proxy-State	Pass-though state used for forwarding requests to another RADIUS accounting server.