Query regarding Certificate authentication support in Duo


#1

We are currently planning to use Duo for authenticating our VPN users. Just wanted to know if Client Certificate based authentication and smart card based authentication are supported along with Push/Call/SMS in MFA product. If not, which product supports the above features


#2

Hi suchindra, certificate-based authentication is not something that Duo supports in any Duo edition. We do have a certificate-based attestation Trusted Endpoints feature for laptops and desktops, but it’s used to supplement, not replace, 2FA.

We do support smart card plus Duo 2FA authentication with our Windows Logon integration, learn more here: https://help.duo.com/s/article/4040