At the moment it appears trusted endpoints via Duo Device Health are only supported on iOS / Android / Windows and Mac. I was wondering what the plans are (if any) for Linux. Is the protocol open, could we make our own widget that reported the data t...
Forum Posts
I am currently deploying SAML Authentication with an onsite Duo Access Gateway server. Everything is working on the SAML Authentication side. However, I want the Cisco ASA to check the user name for the Active Directory group (via LDAP) and then ass...
You might not realize it, but the Duo Policy engine is one of your best tools to reduce risk in your organization. With it, you can define and enforce rules about who can access which applications and under what conditions. Watch the vi...
Below is an email conversation (only slightly edited for sharing publicly) that I had with Stephan from Duo earlier in the year. I am posting it here as I think it would be of interest to the Duo Community and perhaps help garner support for what I t...
We have an issue that we believe to be DUO related. We’re experiencing an issue where we need to reauthorize print drivers for users. I thought it was, at first, related to Microsoft’s Print Nightmare or a recent update to Office but we realized it’...
Hello All, I attached a second phone number to a user account. When attempts to connect through RDP, the option to switch to the second number is greyed out. Alternative authentication methods are greyed as well.
A customer of ours uses DUO as a tool for remote access. Me and a colleague are registered and can access the landscape personalized. We however look for an idea or solution to have some sort of centralized verification method for an Emergency respon...
Please could we have a policy setting which denies the use of ‘Bypass’ for specific applications? We recognise the value Bypass can have, and we use it under very limited circumstances. However, there are some applications which are considered partic...
There are ways to limit which two-factor options are available, like push notifications, SMS text, phone calls, etc. Several times we have been exploited by some account making multiple “expensive” telephony calls or even SMS text to foreign countrie...
Resolved! UPN making user not known
Hi, I am trying to setup DUO proxy but i am stuck. To login on LDAP i need to send user@UPN (user@example.com) to DUO proxy but user is registered in DUO as user (not as user@UPN) and i am getting error saying that that user is not registered. Below ...
We need to enable duo authentication for browser downloads where if a user downloads anything via the browser he is prompted for MFA before the download starts, support is saying this is possible if we have an authentication on the browser need help ...
Is there a way to do an automatic push when using OpenVPN Access Server? It’s kind of annoying every time you connect to the VPN you have to type in “push”, “sms”, etc. There must be a way to have it automatically do a push. There’s a KB article rega...
Since the point of Office 365 is to allow access to your applications (in our case primarily email through Outlook) no matter where you are, restricting access to the DUO Access Gateway server is not really feasible based on source IP addresses. The ...
Hi, is there a way to not require users to be in Duo from a specified IP address range but require them for everywhere else? We are protecting an RDP host. This is to avoid adding about a 100 users that will not be using 2FA for the 5 or 6 who will b...
My phone got broke and i was not able to log in. I tried Support Chat they were very supportive. Helped me log in via call but there was some threshold issue with call login so it took some retries. All of a sudden while support personnel was doing h...
