APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Sep 19, 2024
Version 6.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
enzo's avatar
enzo
Icon for Altostratus rankAltostratus
Nov 29, 2023

Hi JonASony,

  I ran into this error. I fixed it by redoing the steps using the exact naming convention provided minus the DUO API keys and links. I know this isn't a great answer but it is a fairly involved build and 1 mistake will cause issues. I suggest turning on OAuth Debugging for the APM policy and sharing it on this thread.

Enzo