02-19-2019 05:27 AM
Hi,
I recently installed Microsoft ADFS (Windows Server 2019) and are now trying to integrate it with DUO. I’ve installed duo-adfs3-1.2.0.17 and enabled MFA as an authentication method (global setting) and in the access control policies, so far so good. The solution works just fine using Internet Explorer, primary authentication (AD) and second MFA, but the MFA part fails using Chrome.
Error:
Requests to the server have been blocked by an extension."
Refused to frame ‘https://■■■■/’ because it violates the following Content Security Policy directive: “default-src ‘self’”. Note that ‘frame-src’ was not explicitly set, so ‘default-src’ is used as a fallback.
I’ve disabled all extensions and also tried incognito without success.
Any ideas?
Br,
Per Tenggren
02-19-2019 02:13 PM
Hey @PerTenggren a few things.
We haven’t officially launched support w/ ADFS 2019 just yet. We’re working on it.
If possible open a case with Microsoft and reference the notes about HTTP Header customization on the ADFS 2019 new feature page: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/whats-new-active-directory-federation-services-windows-server
There have been additions to ADFS 2019 in how iframes such as Duo are handled and we’ve not gotten official word from Microsoft on how to support that yet.
Open a Duo support case so we can track this and provide resolution when we have an answer.
02-20-2019 04:52 AM
Do you know when you plan to support ADFS 2019, is it the coming month or should I plan for a ADFS 2016 environment instead?
/Per
02-21-2019 08:01 AM
@PerTenggren We don’t have a firm answer to provide on that, considering we are awaiting an answer back from Microsoft. Once we have that we’ll have a better idea when we can confirm support.
03-07-2019 07:47 PM
Hey @PerTenggren just following up again.
Microsoft docs are updated around ADFS Content Security Policies
Our doc’s should be out fairly soon confirming support and changes needed for Duo on ADFS 2019.
03-11-2019 01:25 AM
Perfect, thanks for the update !
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide