Duo

If your organization uses Duo for multi-factor authentication, it can be integrated with Identity360 to secure portal logins, applications, and endpoints. Through Web SDK v4 you can seamlessly integrate Duo's MFA capabilities with Identity360, redirecting users to Duo for authentication, while enabling users to leverage the Duo Mobile app and other authenticators configured in Duo for Identity360's MFA. Users can approve or deny these login requests using a push notification or by entering the six-digit security code generated by the Duo Mobile app.

Prerequisites

• To configure Web SDK, you need to have a valid Duo account. To know more about Duo plans that offer Web SDK feature, refer to this page.
• Add the Duo API hostname as a trusted site or intranet site on the users' machine if they are using older versions of Internet Explorer. Pop-ups and redirect permissions must be enabled for Identity360 in your browser settings for seamless redirection of the Duo Universal Prompt.
• When using Duo as an authenticator in Identity360, verify that the user's Status is set to Active Require multi-factor authentication (default) in the Duo admin portal to prevent users from skipping Duo verification during Identity360 MFA.

Web SDK v4 configuration steps

1. Log into your Duo account (for example, https://********.duosecurity.com) or sign up for a new account and log in.
2. Go to Applications and click Protect an Application.
3. Search for Web SDK and click Protect.
4. Copy the Client ID, Client Secret, and API Hostname values.
5. From the Identity360 admin portal, navigate to Applications > Multi-factor Authentication > Duo.
6. Under Web SDK v4 settings, paste the Client ID, Client Secret, and API Hostname obtained from the Duo Admin Panel in the respective fields.
7. Click Save.

Configuring Auth API settings of Duo

Auth API ensures that users' Duo enrollment status is synced with Identity360 while they enroll in the Identity360 user portal and when they are redirected to Duo for authentication.

1. Log in to the Duo portal.
2. Navigate to Applications and click Protect an Application.
3. Search for Auth API. Click Protect.
4. Copy the Integration Key and Secret Key.
5. In the Identity360 admin portal, under the Web SDK v4 configuration settings for Duo, click Advanced Settings to open Auth API configuration settings.
6. Paste the Integration Key and Secret Key copied during step 4 in the relevant fields, and click Save.

Configuring Device Management Portal settings of Duo

The Duo Device Management Portal enables users to add or remove Duo-registered devices from the Identity360 user portal. Here are the steps to configure the Duo Device Management portal:

1. Log into Duo and go to Applications > Protect an Application.
2. Search for Device Management Portal. Click Protect.
3. Copy the Client ID and Client Secret from the Details section.
4. In the Identity360 admin portal, under the Web SDK v4 configuration settings for Duo, click Advanced Settings to open Device Management Portal settings.
5. Paste the Client ID and Client Secret copied during step 3 in the relevant fields and click Save.