Forum Discussion

Martin_182121's avatar
Martin_182121
Icon for Nimbostratus rankNimbostratus
Feb 20, 2015

Duo 2-Factor Authentication

Any experience with Duo 2-Factor? If so, I would like to discuss.

I have a need to incorporate Duo into a working NTLM/Kerberos APM profile to access a IIS web farm. This is an all internal configuration for both users and servers. All users are AD authenticated devices on network. The working profile is currently tranparent to the user. I only want the Duo component to be internactive. The working APM looks like the attached image.

Duo is currently working within our company as it front ends our clinet-VPN service. I can make the solution work if I follow the Duo white paper at:

    https://www.duosecurity.com/docs/f5bigip

However, I see no reason for a login page to gather user information already known by the PC. The working profile pulls these credentials today to perform it authentication tasks.

APM
application delivery
deployment
LTM
security

1 Reply

Sort By
  • Andrew_Husking's avatar
    Andrew_Husking
    Icon for Cirrus rankCirrus
    Feb 22, 2015

    Just insert a login form after kerberos auth (or whereever you want it to occur) and change the fields so only password is shown and change the text to be "Please enter your second factor auth"

     

    This is how we do it with our 2nd factor systems.