Hi, We currently have DUO deployed for MFA for Anyconnect VPN clients terminating on an FTD. Using AD connector as the identity source for users. We would like to move away from this and configure Anyconnect Clients to connect to Meraki and use SAM...
Forum Posts
Hi All, I have integrated two AD server of different forest where same user resides. However i'm facing an issue of Authentication with message 'found multiple user matches'. As per below article if same user resides in different forest then it caus...
Resolved! Microsoft RDP application and Yubikey 5
Hi All,I'm attempting to setup a Yubikey 5 as the authentication method for logging into an RDP session on an AWS site that is protected by the Microsoft RDP application.I have users setup using Duo Mobile and it works fine, but one user doesn't have...
We just had a situation that raised some major red flags with the Duo MFA. We currently have it setup so that users need to confirm the Duo MFA when connecting to our cisco AnyConnect VPN. But just in this past hour, Duo was down and it caused users ...
When a user logins to Duo SSO using a Passwordless method, the experience does not give the warning for expiring password and the ability to reset it.Is there a way to show this when using passwordless. Ideally our users should all get warned no mat...
Do you have any idea on this?[ldap_server_auto]client=ad_clientikey=nnnnskey=nnnnapi_host=api-nnnn.duosecurity.comfailmode=securefactors=pushexempt_ou_1=Xexempt_primary_bind=falseAfter Enable I checked on port seeing certificate is work now. but I tr...
Can anyone explain why an active account would be listed as having an Inactive status? These are accounts with a recent logon and authentication including successful DUO pushes. It's making it difficult to track those accounts that are actually Inact...
I am trying to figure out the best way to give a VA access to certain accounts without giving her the login info. My thought is to share passwords via LastPass (or other password manager), but not not so the password shows. For 2FA, use a bypass code...
Resolved! SAML include all AD groups
We are looking at moving to SSO but need to be able to include all the groups a user is a member of. Is it possible to pull this from AD and include it in SAML claims?Ideally we would want to manage this in a single place (AD) so if we added a new gr...
We are new to Duo but did successfully install/use version 4.20 on 4 of our 6 Windows 10 PCs on the domain. On 2 of the PCs the duo prompt does not load after the user logs into compter…it goes straight to desktop. We have verified the username is co...
We are rolling out the procedure to authenticate end users with a Duo Push when the help desk is supporting end users. However, some of our users have hardware tokens. How are folks authenticating those users? Similarly, what about end users who get ...
Resolved! Username Normalization
I am trying to find the Username Normalization setting and am having no luck. Some of the documentation refers to it and suggests changing it but nowhere does it say where this setting is located. I am using MFA for Windows Logon.
Hi all,I am currently in the process of implementing ASA VPN certificate authentication with Cisco ISE and DUO MFA. However, I have encountered an issue where DUO seems unable to handle authentication without a password.As we are using certificate au...
Hi We have Cisco Cloud email security (CES) solution and need to integrate with On Prem LDAP server. We have cisco DUO and want to integrate it with Cisco CES. i can see that DUO can be integrate with Open LDAP and can use as a Auth source for Cisco...
Hi everybody,I have been searching on the forum and the knowledge base, but I am unable to find anything so maybe somebody here can help me.Recently I have changed somebody's Phone number, and after the change the DUO Call authentication stopped work...
