APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Sep 19, 2024
Version 6.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
JacobV's avatar
JacobV
Icon for Nimbostratus rankNimbostratus
Feb 07, 2023
{"error": "invalid_request", "error_description": "request: ['Length must be between 1 and 4096.'], "}

 When I've seen this error it's typically because I've forgotten to do this final step:

Apply iRule to the virtual server

Have spent way too much time troubleshooting when it's a 1-minute fix to enable the iRule.