Hello,
First of all I’m sure this has come up frequently so apologies if I’m asking something that has been answered, and I just didn’t find it. I’m trying to wrap my head around the fail modes, and their relationship with offline mode.
My understanding with failopen and failclose, is they define behavior with the Duo cloud service is not available - Failopen not prompting for MFA, and failclose will deny login. And my understanding of Offline mode, is the ability to use a passcode when the Duo service isn’t available.
Using RDP as an example, only administrators in our org RDP to servers. We are good with denying RDP access to servers if Duo is not available, but, still want the ability to login to servers directly via console if there is a need, if Duo is not reachable. Is this possible? And does offline mode work if the Duo service is not available?
EDIT: A related question, we have a couple of accounts that are shared by multiple users. For these accounts, we’ve associated each users’s phone to those accounts. How does that work with Offline mode - would each user be able to setup offline acdcess using their phones to use these shared accounts, or, would only one phone/device be able to use it?
Thanks
