cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
257
Views
0
Helpful
3
Replies

Duo Issue Allowing Logon to Some Workstations But Not Others

adds-jb
Level 1
Level 1

I am seeing an issue where I can log onto to some of our workstations but not others using two separate user accounts that are M365 accounts.  For example, user account A can log onto workstation A.  However, when I use user account A to log onto workstation B an error is produced stating that the user is not enrolled in Duo.  I am seeing this with two user accounts across multiple workstations.  The Duo logs show successful logons for the accounts in question on the workstations they are able to log into as expected, but failures on others.  Even more odd is that the users that these workstations are assigned to are able to log in with their accounts just fine (prompted by Duo as expected).  It's almost like the two accounts I am trying to use are tied to specific workstations or something.  

1 Accepted Solution

Accepted Solutions

We got this figured out last Friday after I posted here.  The issue was that my name in Duo had an extra space character in a portion of it which didn't match with Duo.  Pretty simple fix once we figured it out.  

View solution in original post

3 Replies 3

DuoKristina
Cisco Employee
Cisco Employee

Is the username that is allegedly not enrolled in Duo the username and format you expect? Many Duo applications have a username normalization option, that transforms the username sent to Duo i.e. you type in "robin@foo.com" but if normalization is set to simple then just "robin" gets sent to Duo as the username. Is it possble the workstations have different Duo apps installed with different normalization settings?

ETA: If your issue is with Duo Authentication for Windows Logon, here's how to enable debug logging to see more info about what's happening: https://help.duo.com/s/article/1083

Duo, not DUO.

We got this figured out last Friday after I posted here.  The issue was that my name in Duo had an extra space character in a portion of it which didn't match with Duo.  Pretty simple fix once we figured it out.  

DuoKristina
Cisco Employee
Cisco Employee

Oh, I'm glad you spotted that! Do you mind marking your question as answered?

Duo, not DUO.
Quick Links