Protecting Applications

New Duo users here … I have a user that got locked out for ignoring a Duo 2FA prompt. This user once locked out is just bypassing the Duo 2FA requirement. The group that the user is in requires 2FA. The application is set to enforce 2fa. Duo shows d...

Hi there I’ve got an instance of a Google Workspace LDAP server. We’re a small organisation, and it’s worked well for us in the past. We have had OpenVPN authenticating happily directly to Google’s LDAP and I thought we could put Duo’s auth proxy in...

We have a need to allow users from 2 different domains to login to a group of Linux VM’s. Currently the pam_duo module is only capable of being configured to one Duo instance. Has anyone been down this rabbit hole? Seeking advice.

Hi, we just finished setting up MacLogon 2.0.0 with Duo Push and Yubikey AES. However, offline functionality still requires the use of the Duo mobile app. Will account based bypass codes made to work eventually? This would be the last step in getting...

Hi, I am trying to get pam duo to work with Ubuntu 22.04. I upgraded from Ubunto 21.10, which I upgraded from 21.04 with no issues with pam duo. But after upgrading from 21.10 to 22.04, pam duo SSH MFA stopped working; in fact, my keyboard-interact...

Is Go-Global one of the supported applications to protect?

I’m attempting to setup our domain joined Windows clients to require DUO MFA whenever the user needs admin right, i.e., at a UAC prompt. I have modified policy to require the user enter credentials at the UAC prompt even if they are admins, which do...

My company recently changed from connecting to VPN from Aruba VIA to Global Protect and now several times throughout the day I get a Duo verification on my phone asking if I’m trying to connect to our VPN, but I’m not. I don’t think it’s fraud (too m...

I had to set up a generic SAML integration for my Google integration with Duo and am being prompted twice for my login, first by Google and then again by Duo. Is there a way to pass that information on to Duo so I do not have to enter my login twice...

Hello All, Need to know is it possible to achieve 2fa for Fortinet SSL VPN users. Like primary authentication will be users who are locally configured on Fortinet device (no Ad server here) and second will be via duo. Please help me

We’ve got the following setup: 2 x Meraki MX100 in datacenter setup with RADIUS authentications to Duo Proxy 2 x Windows Server 2019 Domain Controllers with Duo Proxy 5.7.1 installed Windows 11 laptops with L2TP VPN configuration to MX100 Occasionall...

Hey folks, So I am setting up DUO SSO for the first time. The goal is to get an MFA prompt when users log into Office.com. ADFS is NOT setup on my Windows 2016 Server, but Azure AD Connect is already setup and configured. Do I need to re-configure...

Hello, we are using MFA as ldap proxy behind fortinet ssl-vpn. Users can take passcode and use it like “password,code”. Some users has comma on their passwords. Is there any other way to use sms passcode?