APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Sep 19, 2024
Version 6.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP
Aug 01, 2022

Hi ScottE,

I found that simply switching the variables from global to local seemed to work. So far I have only tested this integration with the per-session APM setup and not per-flow, so I'm not 100% clear if there could be a limitation there.

Thanks,
Josh