I am able to manually create users in the DUO Admin Portal. Where or how do I set the password for them?
Forum Posts
Hello,I was trying to setup 2fa for our Linux server running on Oracle Linux 8.10. everything seemed fine until I discovered that when i entered a wrong password, duo still prompts me for a 2fa code or push notification depending on what i choose. Is...
Hello, I have the configuration for one domain in Duo with authentication proxy working but the error 'the directory server credentials were rejected' in the configuration directory. The certificate is correct and when I run the config tool, there ar...
Resolved! Enrolling Directory Sync users
Good Afternoon,I am in the process of rolling out MFA for all in our organization. We've been using it admin only for over a year. I have Directory sync all set up but I'm running into some issues with the process.If I sync users and set them to "Act...
Perhaps sone one here has a solution, to quote QUEEN, I'm going slightly mad...One of our users was renamed from username firstname to username firstname.longlastn (cut off due to length in the pre windows 2000 field) in active directory his email a...
Dear Duo Community members, I am using duo radius proxy, and its really simple and great and very reliable, yet I have a problem, I want to ship its logs to an external server to save the auth-logs for longer period of time and to process them throug...
When logging into Horizon, external users are getting stuck on a Horizon/Duo redirect page. It does this for the Horizon client and thin clients. VMware support is saying it is a time sync issue. When I changed the time zone on the UAG, the issues...
Resolved! Cisco duo ldaps certificate
Hello, Can someone explain me how to generate the right type of certificate to use ldaps connection between AD and DUO proxy ?I have SSL install on my Windows. Cause i have tried multiples solutions, but each time, I get this error message in my prox...
Hi, We currently have DUO deployed for MFA for Anyconnect VPN clients terminating on an FTD. Using AD connector as the identity source for users. We would like to move away from this and configure Anyconnect Clients to connect to Meraki and use SAM...
Hi All, I have integrated two AD server of different forest where same user resides. However i'm facing an issue of Authentication with message 'found multiple user matches'. As per below article if same user resides in different forest then it caus...
Resolved! Microsoft RDP application and Yubikey 5
Hi All,I'm attempting to setup a Yubikey 5 as the authentication method for logging into an RDP session on an AWS site that is protected by the Microsoft RDP application.I have users setup using Duo Mobile and it works fine, but one user doesn't have...
We just had a situation that raised some major red flags with the Duo MFA. We currently have it setup so that users need to confirm the Duo MFA when connecting to our cisco AnyConnect VPN. But just in this past hour, Duo was down and it caused users ...
When a user logins to Duo SSO using a Passwordless method, the experience does not give the warning for expiring password and the ability to reset it.Is there a way to show this when using passwordless. Ideally our users should all get warned no mat...
Do you have any idea on this?[ldap_server_auto]client=ad_clientikey=nnnnskey=nnnnapi_host=api-nnnn.duosecurity.comfailmode=securefactors=pushexempt_ou_1=Xexempt_primary_bind=falseAfter Enable I checked on port seeing certificate is work now. but I tr...
Can anyone explain why an active account would be listed as having an Inactive status? These are accounts with a recent logon and authentication including successful DUO pushes. It's making it difficult to track those accounts that are actually Inact...
