EAP Attributes

  • Article

An EAP attribute is an EAP_ATTRIBUTE structure that contains a predetermined type of data relating to an authentication session. Attributes are used to communicate information between EAP methods and supplicants or between EAP methods and authenticators. Peer and authenticator implementations of an EAP method may exchange these attributes over a network.

A complete list of supported attribute types appears in the topic EAP_ATTRIBUTE_TYPE.

Attributes Consumed by Supplicants

The following attribute types are consumed by 802.1X supplicants.

  • eatVendorSpecific

The following attribute types are consumed by PPP client supplicants.

  • eatMinimum
  • eatEAPTLV

The following attribute types are consumed by PPP server supplicants.

  • eatUserName
  • eatReplyMessage
  • eatState
  • eatSessionTimeout
  • eatEAPMessage

Attributes Exported by Methods

The following attribute types could be exported by EAP methods.

  • eatClearTextPassword
  • eatQuarantineSoH
  • eatMethodId

The following attribute type is exported by EAP Transport Level Security (TLS) (EAP-TLS) methods.

  • eatCertificateOID

The following attribute types are exported by Microsoft Challenge Handshake Authentication Protocol version 2.0 (MS-CHAPv2) methods.

  • eatUserName
  • eatCredentialsChanged

The following attribute type is consumed by Network Policy Server (NPS).

  • eatCertificateOID

The following attribute types are exported by Protected Extensible Authentication Protocol (PEAP) methods.

  • eatUserName
  • eatPEAPEmbeddedEAPTypeId
  • eatPEAPFastRoamedSession
  • eatQuarantineSoH

EAP_ATTRIBUTE

EAP_ATTRIBUTE_TYPE