Forum Discussion
David_E__Smith_
Nimbostratus
NimbostratusTrouble implementing multi-stage authentication (AD + Duo)
I'm trying to implement an unusual multi-stage, multi-factor authentication process, and I'm getting hung up for reasons that aren't clear to me.
Here's the existing, and working, system: The us...
So at the start of the policy the session.custom.* variables are already set? In your first example you have a Logon Page before anything happens, but not in the updated example.
I'd add a bunch of logging agents to your VPE at various points, and dump the session variables to the log. It might be that one of them is not set as expected. The message box agent works well here too, in a development scenario.
On the other hand, I don't understand the difficulty in setting up a service account to operate your AD Query. It could save you a big headache, and works well in our environment. Did you run into specific issues with that?
