Integrating DUO Two-Factor Authentication

Owned by Universal Importer for Confluence
Last updated: Jun 28, 2018 by Phillip Hanegan
Home  /  Single Sign-On  /  Multi-Factor and Adaptive Authentication  /  Current: Integrating DUO Two-Factor Authentication

If your organization is using multi-factor authentication, you can configure EmpowerID to enable users to use Duo as a second factor by registering your corporate Duo account in EmpowerID and adding Duo Two-Factor Authentication to any Password Manager policy or SSO application as a multi-factor authentication type.

Prerequisites

In order to use Duo, your organization must have a Duo account. If you do not have a Duo account, you can sign up for one by visiting https://signup.duo.com/.

To integrate DUO Two-Factor Authentication

  1. In the Navigation Sidebar, expand Admin, then Miscellaneous, and click EmpowerID System Settings.
  2. Search for DUO. Settings for DUOAPIHostName, DUOIntegrationKey and DUOSecretKey appear in the grid.



  3. Above the grid, click the Edit button for the DUOAPIHostName setting.



  4. In the dialog that appears, enter your DUO API hostname in the Value field and click Save.



  5. Back in the grid, click the Edit button for the DUOIntegrationKey setting.
  6. Enter your DUO integration key in the Value field and click Save.
  7. Next, click the Edit button for the DUOSecretKey setting.
  8. Enter your DUO secret key in the Value field and click Save.

    Each DUO setting is now populated with the corresponding values for your DUO account.


Now that you have registered your DUO account in EmpowerID, the next step to using it for MFA in EmpowerID is to add it as an MFA type to one or more Password Manager policies and SSO applications. For directions on how to do so, see Assigning MFA Types to Password Manager Policies and Assigning MFA Types to Applications.