Duo 2-Factor Authentication
Any experience with Duo 2-Factor? If so, I would like to discuss.
I have a need to incorporate Duo into a working NTLM/Kerberos APM profile to access a IIS web farm. This is an all internal configuration for both users and servers. All users are AD authenticated devices on network. The working profile is currently tranparent to the user. I only want the Duo component to be internactive. The working APM looks like the attached image.
Duo is currently working within our company as it front ends our clinet-VPN service. I can make the solution work if I follow the Duo white paper at:
https://www.duosecurity.com/docs/f5bigip
However, I see no reason for a login page to gather user information already known by the PC. The working profile pulls these credentials today to perform it authentication tasks.