Companion App vs. Duo Security / Duo Push

[matthias.rehs]

Hi there,

my company runs Confluence with 2FA (Duo Push).
Work fine, so far.
But editing documents via Companion App does not work at all.

When I navigate to a Page in Confluence with a document (e.g. document.docx ), Confluence offers me a correct preview of the document and an “edit” button.

When I push “edit”, the companion App start, downloads something and opens associated software (e.g. Word).

But Word throws an error, that the downloaded document is corrupt.
Further inspection of the downloaded file reveals, that the Companion App did not downloaded the wanted “document.docx” but only the “duo push - welcome” page (plain text html file named “document.docx”).

Does anyone have an idea, how this could be solved?

[DuoKristina]

Are you using the duo-universal-atlassian plugin with Confluence?

I suspect you might be running into a situation similar to what’s described in this Duo KB article , but it’s the Companion app making the API call to Confluence.

We have not tested the Companion app. It may be possible for you similarly add the API endpoint used by the Companion app to the unprotected.dirs.