Hi All, I have integrated two AD server of different forest where same user resides. However i'm facing an issue of Authentication with message 'found multiple user matches'. As per below article if same user resides in different forest then it caus...
Forum Posts
Resolved! Microsoft RDP application and Yubikey 5
Hi All,I'm attempting to setup a Yubikey 5 as the authentication method for logging into an RDP session on an AWS site that is protected by the Microsoft RDP application.I have users setup using Duo Mobile and it works fine, but one user doesn't have...
We just had a situation that raised some major red flags with the Duo MFA. We currently have it setup so that users need to confirm the Duo MFA when connecting to our cisco AnyConnect VPN. But just in this past hour, Duo was down and it caused users ...
When a user logins to Duo SSO using a Passwordless method, the experience does not give the warning for expiring password and the ability to reset it.Is there a way to show this when using passwordless. Ideally our users should all get warned no mat...
Do you have any idea on this?[ldap_server_auto]client=ad_clientikey=nnnnskey=nnnnapi_host=api-nnnn.duosecurity.comfailmode=securefactors=pushexempt_ou_1=Xexempt_primary_bind=falseAfter Enable I checked on port seeing certificate is work now. but I tr...
Can anyone explain why an active account would be listed as having an Inactive status? These are accounts with a recent logon and authentication including successful DUO pushes. It's making it difficult to track those accounts that are actually Inact...
I am trying to figure out the best way to give a VA access to certain accounts without giving her the login info. My thought is to share passwords via LastPass (or other password manager), but not not so the password shows. For 2FA, use a bypass code...
Resolved! SAML include all AD groups
We are looking at moving to SSO but need to be able to include all the groups a user is a member of. Is it possible to pull this from AD and include it in SAML claims?Ideally we would want to manage this in a single place (AD) so if we added a new gr...
We are new to Duo but did successfully install/use version 4.20 on 4 of our 6 Windows 10 PCs on the domain. On 2 of the PCs the duo prompt does not load after the user logs into compter…it goes straight to desktop. We have verified the username is co...
Resolved! Username Normalization
I am trying to find the Username Normalization setting and am having no luck. Some of the documentation refers to it and suggests changing it but nowhere does it say where this setting is located. I am using MFA for Windows Logon.
Hi all,I am currently in the process of implementing ASA VPN certificate authentication with Cisco ISE and DUO MFA. However, I have encountered an issue where DUO seems unable to handle authentication without a password.As we are using certificate au...
Hi We have Cisco Cloud email security (CES) solution and need to integrate with On Prem LDAP server. We have cisco DUO and want to integrate it with Cisco CES. i can see that DUO can be integrate with Open LDAP and can use as a Auth source for Cisco...
Hi everybody,I have been searching on the forum and the knowledge base, but I am unable to find anything so maybe somebody here can help me.Recently I have changed somebody's Phone number, and after the change the DUO Call authentication stopped work...
Hello, I’ve been attempting to move to the Universal Prompt for years, but there has always been technical blockers. With the announcement that support for the Traditional Prompt is ending in the coming months, I’m growing in concern that gaps I’ve c...
Resolved! Domain Admin in Windows Active Directory
Hi,I would like to clarify the license counts on Windows Logon and RDP. In the document, it mentioned all interactive users will be enrolled in Duo admin page. But in our environment, we wants to enable 2FA for Windows Domain Admin only. Do we need t...