Forum Discussion
Allwyn_Mascaren
Cirrus
CirrusAPM DUO 2FA fails after logon page customization
Hi Folks,
I am using DUO mobile push for 2FA, I got this working perfectly with the default APM logon page.
F5 BIG-IP APM with RADIUS and Duo Prompt
This is the working page when using the defa...
Dave_McCauley_3
Cirrostratus
CirrostratusWhat programs are you using to capture all that? I could use it for some stuff.
On your new custom design fiddler output I don't see the call to the js script that duo needs to work. Are you overwriting the whole logon.inc when you update it? It's tough to see, but in the original page it has a PHP include for the header.inc and footer.inc. If you've replaced that, you're not going to have the script still.
Try adding the
part to your new custom page right before the ending body tag at the bottom of your html.
Also, on a sidenote, I'm not sure if there's a security risk with that api URL being posted, but it's xxx'd out in their guide. I didn't look through it if there's any keys or anything else in there.
Let us know if you get it working! Dave
Dave_McCauley_3Cirrostratus
CirrostratusAdd the duo js script to the of your new custom logon.inc page. I think you overwrote the php include statement for the header.inc which has the script in it so it's not even loading the header.inc or footer.inc anymore. They're not hardcoded into APM to load them, they're all loaded from the different "inc" pages.
Let me know if that makes sense.
Regarding another branch, that won't change anything because the HTML that is sent is static. You could add another logon page with duo on it using the original logon.inc and it might render it and work, but that defeats the purpose of your customizations. I recall trying to get duo working with the standard radius VPE entry in the BIG-IP years ago and I don't think push works in that case.