Secure Mobile Access 12.5 Administration Guide

Technical Documentation>  Authentication>  Network and Authentication Configuration>  Managing User Authentication>  Cisco Duo Security Multi-factor Authentication Server>  Configuring Cisco Duo Security MFA Server in SMA1000
Table of Contents

Configuring Cisco Duo Security MFA Server in SMA1000

Configure authentication settings for Cisco Duo Security Multi-Factor Authentication server in SMA1000 AMC.

To configure, do the following

  1. In AMC, navigate to System Configuration > Authentication Servers.

  2. Click New and select Cisco Duo Security MFA.

  3. In the Name field, type a name for the authentication server.

  4. Under the General section, enter the API hostname, Integration key and Secret key copied from Duo admin portal.

  5. Enable Forward user IP to Cisco Duo MFA if you have enabled network-related settings under Duo's application policy server. By default this Forward user IP to Cisco Duo MFA check box is enabled. See Networks Policy Settings.

  6. Click Test to test appliance connectivity with Duo MFA server and verify credentials.

    Duo MFA authentication fails if appliance clock is incorrect. Synchronize with NTP server to avoid Duo MFA authentication failures.

  7. To allow device enrollment with Cisco Duo Security Multi-Factor Authentication during user login, see Enrolling users for Cisco Duo Security MFA Server.

Chat