APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Nov 27, 2024
Version 7.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP
Feb 08, 2023

In this case I believe the F5 acts as an OAuth client talking directly to the API server at Duo, which is unlike SAML authentication.

I recall running into a similar issue with one of my deployments of this setup.