Module duo

Last modified 07 May 2024 11:13 +02:00

Module is used for 2FA authentication. Module use duo server for authentication via hardware key of mobile, tablet and so on. We can’t use it as only one authentication module. We need some primary authentication module for example saml, loginForm, etc.

Configuration of duo module contains next configuration properties, that you can read from duo server.

Name Description Required Type

Name	Description	Required	Type
`clientId`	This value is the client id provided by Duo in the admin panel.	true	string
`clientSecret`	This value is the client secret provided by Duo in the admin panel.	true	ProtectedStringType
`apiHostname`	This value is the api host provided by Duo in the admin panel.	true	string
`CACerts`	List of CA Certificates to use. You need add your cert when it misses in default certs.	false	string
`pathForDuoUsername`	The path to the user attribute which should be sent to duo server as username of authenticated user. Default path is for name attribute.	false	ItemPathType

clientId

This value is the client id provided by Duo in the admin panel.

true

string

clientSecret

This value is the client secret provided by Duo in the admin panel.

true

ProtectedStringType

apiHostname

This value is the api host provided by Duo in the admin panel.

true

string

CACerts

List of CA Certificates to use. You need add your cert when it misses in default certs.

false

string

pathForDuoUsername

The path to the user attribute which should be sent to duo server as username of authenticated user. Default path is for name attribute.

false

ItemPathType

Example of duo module

<duo>
    <identifier>duo2FA</identifier>
    <clientId>your_client_ID</clientId>
    <clientSecret>
        <clearValue>your_client_secret</clearValue>
    </clientSecret>
    <apiHostname>your_api_hostname</apiHostname>
</duo>

Module duo

See also