We currently have Duo setup with AD FS and all is working well. I’m about to invite a large number of Guest accounts into our Azure AD but don’t want to have to purchase Duo licences for them all (I do want them to use MFA), Anyone setup AD FS in a w...
Forum Posts
Hey guys, Hope you guys are doing well. I have implemented DUO for multiple customers and solution seems pretty good. But I have not worked on any other MFA solution and I wanted to know why is Cisco DUO better than other solutions
Hello, Lets say I have 2 applications configured. Radius for VPN and Microsoft RDP for desktop logins. I have 20 users enrolled. All 20 users must use MFA to connect to VPN. Now I only want 5 of my 20 users to require MFA for RDP. The other 15 e...
Free account here for my home lab - two admin users, and 3 regular users. I switched phones for Admin B, and when I try to login with that account and send it a push, it comes through, I approve, and then it puts up a dialog that says: Reactivation R...
This is the first in a new series of posts we’re trying out based on questions that come up often when talking with customers, either in the forum, support cases, or both! You can find the answer to many of Duo’s frequently asked questions in the hel...
Is there an API to find out the user’s choice of authentication method. This choice can be made during enrollment, however there doesn’t seems to be a way to get that information later. Thanks, Halley
Hi, My Duo and integration with AAD is working great. However, I see many businesses and colleges using “landing pages” where they can direct their users to authenticate using the campus or business authentication mechanism, then, once authenticated,...
Hello ! New there, so maybe the question was already be answered somewhere, sorry in advance for this… Environment : VPS Debian 10 server, with pam_duoonly enrolled usersDUO MFA My question is : how can I manage policies to allow console logins witho...
Resolved! DUO MFA for VPN-AD users
just wanted to setup DUO MFA for ASA VPN users. Users are AD users. How can DUO know to which mobile number MFA request should be send when a user logs in. How is DUO relating a phone number/phone to an AD user.
Hi all, I hope I am posting this in the correct section. I would like to know if there is any options or roadmap to increase the number of reports or customisation of the reports. for example, on the Bypass users report, is it possible to include the...
Is there a way to configure a custom access denied message when CIsco anyconnect is configured using DUO LDAPS?
Hi all, Sorry if this has been asked before! im looking for the correct way to manage shared or general O365 email accounts scanner@ dispatch@ etc . These are accounts used for users or devices who don’t have a phone or 2FA token. I would like th...
We are utilizing self-enrollment, and that seems to go fine. The user enters his/her phone number and then is presented with a QR Code to activate the account (so, this seems like it is an enrollment and activation bundled into one). But some users ...
Got a puzzler here for you all. We host a multi-tenant Exchange environment. One of our tenants is looking to implement Duo and I am a bit lost for how to implement it for only their tenant. We use it just about everywhere for our purposes, but it is...
We are setup with two enrollment methods. Inline SelfEnroll is the primary for citrix users, so they enroll themselves the first time they login. We also have a couple hundred who were ad-sync enrolled through a security group, SG_Duo I was wondering...
