APM Configuration to Support Duo MFA using iRule

Overview BIG-IP APM has supported Duo as an MFA provider for a long time with RADIUS-based integration. Recently, Duo has added support for Universal Prompt that uses Open ID Connect (OIDC) protoco...
0151T0000040JicQAE.png
Updated Sep 19, 2024
Version 6.0
BIG-IP
BIG-IP Access Policy Manager (APM)
big-ip apm
duo
iRules
mfa
OAuth Client
security
JonASony's avatar
JonASony
Icon for Nimbostratus rankNimbostratus

I've followed the directions but I receive the following error on Duo:

{"error": "invalid_request", "error_description": "request: ['Length must be between 1 and 8960.'], "}

I've verified that the iRule is indeed applied.  

Luis_Melendrez's avatar
Luis_Melendrez
Icon for Altostratus rankAltostratus
Feb 01, 2024

Hello Jon,

 

I keep getting same error.

Were you able to find the cause?

Thanks

  • JonASony's avatar
    JonASony
    Icon for Nimbostratus rankNimbostratus
    Feb 22, 2024

    In the Configuring the iRule Event agent section, I was naming the JWT something custom instead of exactly what's in the documentation.