APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Sep 19, 2024
Version 6.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
varunmuthusamy's avatar
varunmuthusamy
Icon for Nimbostratus rankNimbostratus
Jun 16, 2021

Hi  

 

Found the issue,

under "Configure an auth-redirect-request and a token-request" section,

For per-session policy: %[session.custom.jwt_duo] needs to be replaced with %{session.custom.jwt_duo} 

The brackets were incorrect, this document needs to be updated.