I am trying to figure out the best way to give a VA access to certain accounts without giving her the login info. My thought is to share passwords via LastPass (or other password manager), but not not so the password shows. For 2FA, use a bypass code...
Forum Posts
Resolved! SAML include all AD groups
We are looking at moving to SSO but need to be able to include all the groups a user is a member of. Is it possible to pull this from AD and include it in SAML claims?Ideally we would want to manage this in a single place (AD) so if we added a new gr...
We are new to Duo but did successfully install/use version 4.20 on 4 of our 6 Windows 10 PCs on the domain. On 2 of the PCs the duo prompt does not load after the user logs into compter…it goes straight to desktop. We have verified the username is co...
We are rolling out the procedure to authenticate end users with a Duo Push when the help desk is supporting end users. However, some of our users have hardware tokens. How are folks authenticating those users? Similarly, what about end users who get ...
Resolved! Username Normalization
I am trying to find the Username Normalization setting and am having no luck. Some of the documentation refers to it and suggests changing it but nowhere does it say where this setting is located. I am using MFA for Windows Logon.
Hi all,I am currently in the process of implementing ASA VPN certificate authentication with Cisco ISE and DUO MFA. However, I have encountered an issue where DUO seems unable to handle authentication without a password.As we are using certificate au...
Hi We have Cisco Cloud email security (CES) solution and need to integrate with On Prem LDAP server. We have cisco DUO and want to integrate it with Cisco CES. i can see that DUO can be integrate with Open LDAP and can use as a Auth source for Cisco...
Hi everybody,I have been searching on the forum and the knowledge base, but I am unable to find anything so maybe somebody here can help me.Recently I have changed somebody's Phone number, and after the change the DUO Call authentication stopped work...
Hello, I’ve been attempting to move to the Universal Prompt for years, but there has always been technical blockers. With the announcement that support for the Traditional Prompt is ending in the coming months, I’m growing in concern that gaps I’ve ...
Resolved! Domain Admin in Windows Active Directory
Hi,I would like to clarify the license counts on Windows Logon and RDP. In the document, it mentioned all interactive users will be enrolled in Duo admin page. But in our environment, we wants to enable 2FA for Windows Domain Admin only. Do we need t...
Does Duo support user “run-as” and RSAT commands in AD with elevated rights? If so, are there instructions on how to set this up. I am looking to support Active Directory Administrators with MFA for when they use administrative tools with their Serv...
Hello, Is it possible to configure duo MFA with ISE using its internal users for authentication, not using external sources like AD ?
Hi,Is it possible to disable the rights for a group of Duo administrators to generate bypass codes or set the bypass authentication method?Thanks
Hi,I've setup a OpenLDAP sync using the proxy service. Connection is working and the list of groups are showing in the drop down list. However, when I select sync, no users are imported (1 error; see Administrator Actions report.) as per the snip bel...
Hello, I am from a performance test team, where our tests need to run for hours, atleast 10-12 hours without interupption to generate a scalable tests. But as the duo-sso session expires in 60 mins, the tests fails..In such cases, somebody has to sea...
