Implementing Duo Authentication for SSRS Page

[SUHAS_Hanumanthaiah]

Hi, I am trying to implement Duo authentication for SQL Server Reporting Server’s Portal. Is there a native support for installing DUO on SSRS web portals like in Azure?

If no native support, Should I just build an additional login page in ASPX and redirect that each time the SSRS is accessed as in the documentation for ASP.NET ?

What are the steps to solve this? Please help.

[algarnon.stamps]

Any luck on this I am trying the samething.

[jollero]

Up on this topic. I’m also interested in doing this.

[Amy2]

Hi folks! Thanks @jollero for raising this question again, and I apologize that the original post slipped through the cracks and it took so long to get a response to this.

Duo does not have SQL protection today. To protect your SQL server with Duo, the only way to do this currently is to protect the computer itself with Duo for Windows Logon and RDP or a Duo Unix integration. You could alternatively protect the network access with a VPN protection.
SQL itself or the AD authentication from your SQL client to SQL server cannot be protected at this time.
While this feature is not something that’s currently available, the Duo Support team would be happy to add you to an existing feature request for this functionality. Please reach out to them for assistance with that!

[jollero]

What if it’s not SQL Server we want to protect. We just want an MFA whenever users of SSRS login to the Reporting Services Page. Is that something possible that DUO can do now? Essentially, SSRS sits on top of IIS.

[Amy2]

Ah, in that case if you can protect SSRS behind ADFS, you can use Duo Authentication for Microsoft AD FS to protect SSRS. Other than that, I am not sure to be honest, as I don’t have any experience with SSRS myself (I’m just answering based off of similar support cases I could find.) Maybe someone else in the community who has protected this before can weigh in!