Duo SSO multiple auth source (on prem AD + Azure AD)

[Marcello75]

Hi, is It possibile for DUO SSO have both on prem AD and Azure AD as Authentication Source for the same domain (i.e. corp.com)? Actually our customer Is using on prem AD as auth. Source and wants to switch on Azure AD without issues. The customer is using an Azure AD synced with on prem AD through AD connects so the domain on the Authentication Source need ti be the same. Thank you

[DuoKristina]

No, using both AD and SAML authentication for SSO in the same domain isn’t available today. Whomever holds the relationship with Duo (you, or your customer) can contact ther Duo account exec or customer success manager, or Duo Support, to make a feature request for this.

[Marcello75]

Thank you Kristina, is it possible to activate both AD and SAML authentication for SSO for different domain?

[DuoKristina · Accepted solution]

No, today use of SAML authentication source and AD authentication source is mutually exclusive.

Here's more info from our SSO documentation:

While you can complete the configuration steps for both Active Directory and SAML authentication sources, only one type of authentication source may be enabled for use at a time.

[Marcello75]

Thank you!

[Gigawatt]

We don't use Azure AD but as far as Auth sources we use the SAML connector to Duo SSO then our On-Prem IdP.