Hello, Can someone explain me how to generate the right type of certificate to use ldaps connection between AD and DUO proxy ?I have SSL install on my Windows. Cause i have tried multiples solutions, but each time, I get this error message in my prox...
Hi, We currently have DUO deployed for MFA for Anyconnect VPN clients terminating on an FTD. Using AD connector as the identity source for users. We would like to move away from this and configure Anyconnect Clients to connect to Meraki and use SAM...
Hi All, I have integrated two AD server of different forest where same user resides. However i'm facing an issue of Authentication with message 'found multiple user matches'. As per below article if same user resides in different forest then it caus...
Hi All,I'm attempting to setup a Yubikey 5 as the authentication method for logging into an RDP session on an AWS site that is protected by the Microsoft RDP application.I have users setup using Duo Mobile and it works fine, but one user doesn't have...
We just had a situation that raised some major red flags with the Duo MFA. We currently have it setup so that users need to confirm the Duo MFA when connecting to our cisco AnyConnect VPN. But just in this past hour, Duo was down and it caused users ...
When a user logins to Duo SSO using a Passwordless method, the experience does not give the warning for expiring password and the ability to reset it.Is there a way to show this when using passwordless. Ideally our users should all get warned no mat...
Do you have any idea on this?[ldap_server_auto]client=ad_clientikey=nnnnskey=nnnnapi_host=api-nnnn.duosecurity.comfailmode=securefactors=pushexempt_ou_1=Xexempt_primary_bind=falseAfter Enable I checked on port seeing certificate is work now. but I tr...
Can anyone explain why an active account would be listed as having an Inactive status? These are accounts with a recent logon and authentication including successful DUO pushes. It's making it difficult to track those accounts that are actually Inact...
I am trying to figure out the best way to give a VA access to certain accounts without giving her the login info. My thought is to share passwords via LastPass (or other password manager), but not not so the password shows. For 2FA, use a bypass code...
We are looking at moving to SSO but need to be able to include all the groups a user is a member of. Is it possible to pull this from AD and include it in SAML claims?Ideally we would want to manage this in a single place (AD) so if we added a new gr...
We are new to Duo but did successfully install/use version 4.20 on 4 of our 6 Windows 10 PCs on the domain. On 2 of the PCs the duo prompt does not load after the user logs into compter…it goes straight to desktop. We have verified the username is co...
We are rolling out the procedure to authenticate end users with a Duo Push when the help desk is supporting end users. However, some of our users have hardware tokens. How are folks authenticating those users? Similarly, what about end users who get ...
I am trying to find the Username Normalization setting and am having no luck. Some of the documentation refers to it and suggests changing it but nowhere does it say where this setting is located. I am using MFA for Windows Logon.
Hi all,I am currently in the process of implementing ASA VPN certificate authentication with Cisco ISE and DUO MFA. However, I have encountered an issue where DUO seems unable to handle authentication without a password.As we are using certificate au...
Hi We have Cisco Cloud email security (CES) solution and need to integrate with On Prem LDAP server. We have cisco DUO and want to integrate it with Cisco CES. i can see that DUO can be integrate with Open LDAP and can use as a Auth source for Cisco...
