03-27-2018 09:19 AM
I have configured Netscaler with DUO so it shows the iframe where I can select Push, Voice or SMS.
Is there a way I can configure so it sends the Push directly instead of showing the iframe?
Solved! Go to Solution.
03-28-2018 08:02 AM
Yes! It depends on how you configured RADIUS authentication.
If you configured it using these instructions where the Duo proxy server handles primary and secondary authentication then you can just get rid of the [radius_server_iframe]
configuration and use one primary RADIUS policy (that corresponds to your [radius_server_auto]
configuration) for both Receiver and Web logins.
If you configured it using these instructions where the Duo proxy server only handles secondary authentication then similarly to the previous suggestion you would not need the [radius_server_iframe]
configuration and use one secondary RADIUS policy (that corresponds to your [radius_server_duo_only]
configuration) for both Receiver and Web logins.
Both [radius_server_auto]
and [radius_server_duo_only]
can do an automatic push.
03-28-2018 08:02 AM
Yes! It depends on how you configured RADIUS authentication.
If you configured it using these instructions where the Duo proxy server handles primary and secondary authentication then you can just get rid of the [radius_server_iframe]
configuration and use one primary RADIUS policy (that corresponds to your [radius_server_auto]
configuration) for both Receiver and Web logins.
If you configured it using these instructions where the Duo proxy server only handles secondary authentication then similarly to the previous suggestion you would not need the [radius_server_iframe]
configuration and use one secondary RADIUS policy (that corresponds to your [radius_server_duo_only]
configuration) for both Receiver and Web logins.
Both [radius_server_auto]
and [radius_server_duo_only]
can do an automatic push.
03-28-2018 11:20 AM
Thanks!
Works fine, although I would have wished for some kind of feedback after typing username and password such as “Sending push…” or similar.
04-04-2018 02:25 PM
You could also set it back to the iframe configuration and tell your users who want automatic pushes to set a default device for automatic push as shown here: https://guide.duo.com/manage-devices#default-authentication-options.
You would need to enable self-service (Protecting Applications | Duo Security) on your NetScaler application in the Duo Admin Panel to expose these options to your users.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: