cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4595
Views
0
Helpful
4
Replies

MFA Options for Duo with RD Gateway

healthci2
Level 1
Level 1

Hello, I’m looking for some clarification on using Duo with RD Gateway. Is it possible to use a hardware token with this application? I’ve got “push” working, but we might prefer users to use a hardware token such as Yubikey.

Thanks

1 Accepted Solution

Accepted Solutions

jamieis
Cisco Employee
Cisco Employee

Hey there @healthci2,

RD Gateway does not currently offer any type of interactive user interface where your users would have the opportunity to type in a code. Because of this our RD Gateway integration only supports auto-push (or if push is not enabled on the default device auto-phone call).

Let me know if you have any other questions!

View solution in original post

4 Replies 4

jamieis
Cisco Employee
Cisco Employee

Hey there @healthci2,

RD Gateway does not currently offer any type of interactive user interface where your users would have the opportunity to type in a code. Because of this our RD Gateway integration only supports auto-push (or if push is not enabled on the default device auto-phone call).

Let me know if you have any other questions!

Thanks for the response.

Sensuki
Level 1
Level 1

Hi there

Are there any plans to make this available in the future?

Hi Sensuki,

This is a technical limitation imposed by how RD Gateway does authentication, not a feature request. If the underlying authentication changes in the future we’ll definitely look into it!

If hardware token is a requirement for you, consider installing Duo Authentication for Windows Logon on your RD Session Hosts instead of Duo RD Gateway. When your users connect to the session hosts they’ll see an interactive UI that lets them choose any available 2FA option, including token passcodes.

Duo, not DUO.
Quick Links