Policy & Access Control

The intuition is requiring 2FA for a slight increase of security. I'm looking to give users the ability to either use the encrypted app or to use another means like a code via SMS or a phone system that isnt encrypted. Is this possible to set up for ...

Are there any plans to extend the MFA APIs in a way that would make Passwordless auth possible outside of Duo SSO? (Yes, I know this will require careful integration to ensure security is maintained.) In my environment, AD auth (and using Duo’s SSO i...

Hello all,I am currently running into an issue if a laptop is connected to our enterprise network (directly - no VPN), end-users are able to us 2FA and connect no issue.  Now if the same user connects to the public WIFI they will go through DUO 2FA l...

I am trying to set up the authentication proxy to connect to an open ldap server. The authproxy_connectivity_tool is telling me that I’m not getting any search results because of my ldap filter. The meaning full section is… The Auth Proxy did not ...

We have multiple, disconnected networks where we have the DNG installed. We’ve been using the RDP functionality for a while in beta and want to expand it to other networks now that it’s in GA. But I don’t see a way to add another gateway to the Heal...

Not sure if this is the right place to post this. I use Duo for a few things and one of them is Keeper for my passwords. The push works fine but about two months ago it stopped allowing me to use SMS when the push wouldn’t go through. I hit the SM...

I have just joined a new organization where the trust remembered devices setting is configured for 180 days and would like to change that to a shorter value. If I make this change, will any end user who has enabled that setting in their browser need...

Is there a way to send a push to all devices using DUO to test for 2FA Fatigue? Currently we DUO setup with just the green checkmark for authentication and I would like to see if people would simply click it out of habit. It would be a great test to ...

I’m loving the introduction of the Duo Verified push and the ability to integrate it with risky login policies! The 2x areas that I haven’t been able to implement Verified Push is on the Duo Admin page as well as on the Microsoft Workstation (RDP) lo...

I’m trying to configure my policies to make it as easy as possible for my users. I know, security shouldn’t be easy and may defeat the purpose of MFA. My set up: Cisco Duo, Directory Sync to AD, protecting Google Workspace. We’re a school district. A...

Is anyone else who is trying the new Risk Based Authentication getting users with a “Country code mismatch detected with risk-based factor selection” which doesn’t elevate the auth, it just errors continuously? The scenario is the user’s Access Devic...