APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Mar 01, 2025
Version 8.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
Hardeep_Kaur's avatar
Ret. Employee
I document user guides, online help, and release notes for F5's BIG-IP APM, F5 Access Apps, and Edge Client products. I also work on Access Guided Configuration online help and compatibility matrices.
View Profile
delv3chio's avatar
Icon for Employee rankEmployee
Joined May 20, 2019
View Profile
Jerrod_Kimbler's avatar
Icon for Employee rankEmployee
Vintage F5 Employee, Est. 2006
View Profile
steve_michaels's avatar
steve_michaels
Icon for Cirrus rankCirrus
May 27, 2021

Hi- I just wanted to mention that I have this working for F5 APM /DUO for auth/access to SharePoint on Windows Clients for opening documents in "native", local Microsoft Applications (Word/PP/Excel). The use case for MAC users trying to open in native applications still will not work. As a workaround, MAC users will have to use a Windows client to get that functionality. The bottom line is that this Oauth/OIDC method that you have developed here improves the user experience for our SharePoint users. Thanks. - Steve