For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Mar 01, 2025
Version 8.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
Hardeep_Kaur's avatar
Ret. Employee
I document user guides, online help, and release notes for F5's BIG-IP APM, F5 Access Apps, and Edge Client products. I also work on Access Guided Configuration online help and compatibility matrices.
View Profile
delv3chio's avatar
Icon for Employee rankEmployee
Joined May 20, 2019
View Profile
Jerrod_Kimbler's avatar
Icon for Employee rankEmployee
Vintage F5 Employee, Est. 2006
View Profile
steve_michaels's avatar
steve_michaels
Icon for Cirrus rankCirrus
May 05, 2021

Hi-

I tried the option 1 in the article to add a MSOFBA client type check in the APM Access Policy. When I try the "open in word" option in SharePoint it still takes me back to the F5 APM login page. When I login again, and pass MFA with DUO prompt, it repeats the process again and again and never opens the word document in Word.

Thanks

Steve