topic Re: Mac OS lock screen doesn’t prompt for Duo MFA in Managing Users

Mac OS lock screen doesn’t prompt for Duo MFA

jloesch — Wed, 21 Sep 2022 18:53:22 GMT

When the user account is logged out it works fine.

Is there a way to set up it so it enforces 2FA authentication after the machine goes to sleep or locked?

Re: Mac OS lock screen doesn’t prompt for Duo MFA

DuoPablo — Thu, 22 Sep 2022 17:00:20 GMT

Currently, we do not support users being prompted for MFA on macOS after screen saver unlock (as opposed to startup or after fully logging out of a user session).

Please feel free to submit this as a feature request with your Duo Account Executive, Customer Success Manager (if applicable), or our Support Team.

Hope this helps!

Re: Mac OS lock screen doesn’t prompt for Duo MFA

jloesch — Thu, 22 Sep 2022 21:59:28 GMT

Thank you for the confirmation

Re: Mac OS lock screen doesn’t prompt for Duo MFA

LGD — Fri, 23 Sep 2022 00:50:39 GMT

Hi,
If you have plans to use Security keys like Yubikey for MacOS login, check out Yubikey’s implementation for MacOS login. Security key is required for the FDE login, user login and login from screen lock/screensaver. IMO Duo’s implementation is still immature.

Re: Mac OS lock screen doesn’t prompt for Duo MFA

shenson — Thu, 30 Oct 2025 12:21:34 GMT

3 years later and DUO/Cisco hasnt figured out how to make it work for a locked screen?

Re: Mac OS lock screen doesn’t prompt for Duo MFA

DuoKristina — Thu, 30 Oct 2025 19:28:40 GMT

Thanks for your question, @shenson . We've actually been working with Apple on this for a while; it is not a simple issue.