topic Re: Where is the Security Key? in Managing Users

Where is the Security Key?

kumquat — Wed, 02 Jun 2021 17:24:23 GMT

I am trying to add Salesforce to DUO mobile app. Do not have a barcode so adding the Salesforce account. Is asking my salesforce account and key. Where is the key?
see attached.

Re: Where is the Security Key?

DuoPablo — Thu, 03 Jun 2021 00:33:47 GMT

Hi @kumquat ,

The barcode or key for linking Salesforce to your Duo Mobile app, which is acting as a 3rd party Authenticator, is found in your Salesforce application.

Please reference page 20 of https://www.salesforce.com/content/dam/web/en_us/www/documents/guides/mfa-quick-admin-guide.pdf or https://help.salesforce.com/articleView?id=sf.mfa_enable_core.htm&type=5

You may need to contact Salesforce support or an administrator responsible for managing your organization’s Salesforce deployment.

Hope this helps!

Re: Where is the Security Key?

kumquat — Tue, 08 Jun 2021 18:30:49 GMT

@DuoPablo Please Please stop tell me to go to Salesforce and the links is Not helpful. because I already know the Salesforce articles. DUO is pushing me to Salesforce for answer and Salesforce is pushing me to DUO for answers. In summary the DUO mobile app belongs to DUO.

Re: Where is the Security Key?

DuoPablo — Tue, 08 Jun 2021 19:01:54 GMT

@kumquat I am sorry that Salesforce is not providing the answer to your inquiry. They may be thinking that your Salesforce environment is integrated to Duo via SSO (based on our earlier conversation).

You are correct that the Duo Mobile app belongs to Duo but since this is a 3rd party integration, we unfortunately do not generate the barcode or key used to synchronize TOTP with Salesforce. The same would hold true if you used another MFA app; the below statement is taken from the Salesforce article I sent previously:

Time-based one-time passcode (TOTP) authenticator apps, like Google Authenticator, Microsoft Authenticator, or Authy

What are the differences between Duo-protected applications and third-party accounts?