03-27-2018 09:19 AM
I have configured Netscaler with DUO so it shows the iframe where I can select Push, Voice or SMS.
Is there a way I can configure so it sends the Push directly instead of showing the iframe?
Solved! Go to Solution.
03-28-2018 08:02 AM
Yes! It depends on how you configured RADIUS authentication.
If you configured it using these instructions where the Duo proxy server handles primary and secondary authentication then you can just get rid of the [radius_server_iframe]
configuration and use one primary RADIUS policy (that corresponds to your [radius_server_auto]
configuration) for both Receiver and Web logins.
If you configured it using these instructions where the Duo proxy server only handles secondary authentication then similarly to the previous suggestion you would not need the [radius_server_iframe]
configuration and use one secondary RADIUS policy (that corresponds to your [radius_server_duo_only]
configuration) for both Receiver and Web logins.
Both [radius_server_auto]
and [radius_server_duo_only]
can do an automatic push.
03-28-2018 08:02 AM
Yes! It depends on how you configured RADIUS authentication.
If you configured it using these instructions where the Duo proxy server handles primary and secondary authentication then you can just get rid of the [radius_server_iframe]
configuration and use one primary RADIUS policy (that corresponds to your [radius_server_auto]
configuration) for both Receiver and Web logins.
If you configured it using these instructions where the Duo proxy server only handles secondary authentication then similarly to the previous suggestion you would not need the [radius_server_iframe]
configuration and use one secondary RADIUS policy (that corresponds to your [radius_server_duo_only]
configuration) for both Receiver and Web logins.
Both [radius_server_auto]
and [radius_server_duo_only]
can do an automatic push.
03-28-2018 11:20 AM
Thanks!
Works fine, although I would have wished for some kind of feedback after typing username and password such as “Sending push…” or similar.
04-04-2018 02:25 PM
You could also set it back to the iframe configuration and tell your users who want automatic pushes to set a default device for automatic push as shown here: https://guide.duo.com/manage-devices#default-authentication-options.
You would need to enable self-service (Protecting Applications | Duo Security) on your NetScaler application in the Duo Admin Panel to expose these options to your users.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide