topic Duo SSO multiple auth source (on prem AD + Azure AD) in Deployment Strategy

Duo SSO multiple auth source (on prem AD + Azure AD)

Marcello75 — Tue, 18 Jul 2023 18:05:16 GMT

Hi, is It possibile for DUO SSO have both on prem AD and Azure AD as Authentication Source for the same domain (i.e. corp.com)? Actually our customer Is using on prem AD as auth. Source and wants to switch on Azure AD without issues. The customer is using an Azure AD synced with on prem AD through AD connects so the domain on the Authentication Source need ti be the same. Thank you

Re: Duo SSO multiple auth source (on prem AD + Azure AD)

DuoKristina — Wed, 19 Jul 2023 12:37:15 GMT

No, using both AD and SAML authentication for SSO in the same domain isn’t available today. Whomever holds the relationship with Duo (you, or your customer) can contact ther Duo account exec or customer success manager, or Duo Support, to make a feature request for this.

Re: Duo SSO multiple auth source (on prem AD + Azure AD)

Marcello75 — Wed, 19 Jul 2023 13:06:53 GMT

Thank you Kristina, is it possible to activate both AD and SAML authentication for SSO for different domain?

Re: Duo SSO multiple auth source (on prem AD + Azure AD)

DuoKristina — Wed, 19 Jul 2023 14:10:24 GMT

No, today use of SAML authentication source and AD authentication source is mutually exclusive.

Here's more info from our SSO documentation:

While you can complete the configuration steps for both Active Directory and SAML authentication sources, only one type of authentication source may be enabled for use at a time.

Re: Duo SSO multiple auth source (on prem AD + Azure AD)

Marcello75 — Wed, 19 Jul 2023 16:02:14 GMT

Thank you!

Re: Duo SSO multiple auth source (on prem AD + Azure AD)

Gigawatt — Fri, 21 Jul 2023 17:02:54 GMT

We don't use Azure AD but as far as Auth sources we use the SAML connector to Duo SSO then our On-Prem IdP.