cancel
Showing results for 
Search instead for 
Did you mean: 

Prompt for F5 and Duo APM integration

Mick
Altocumulus
Altocumulus

Hi

I have integrated the F5 with Duo as per this link, works perfectly.

https://duo.com/docs/f5bigip-alt

However, our end users would like some sort of prompt or message to prompt them to look at their phone to approve the access. Something like "waiting for user...". I could put a message box in the access policy but that would be clumsy as the user would need to click another button.

Could anyone provide any tips on achieving this? Something like a spinning wheel to pop up with a message would be great.

5 REPLIES 5

LiefZimmerman
Community Manager
Community Manager

Thanks for the question @Mick.

That Duo article is robust. I don't know much about this specifically - I'll reach out to some folks to see if anyone has any ideas.

------
Lief ZimmermanLiefZimmerman | @LiefZF5 | DevCentral Community Manager

LiefZimmerman
Community Manager
Community Manager

actually - does this present a possible solution for you?

https://community.f5.com/t5/technical-forum/customize-apm-policy-message-box-with-image/m-p/264906

------
Lief ZimmermanLiefZimmerman | @LiefZF5 | DevCentral Community Manager

Hi Lief

Thanks for the reply. That was my fall back solution, its not ideal as it requires the user to click another prompt. What I was hoping for, was that when the Duo notifiction is sent to the users phone, a message appears on the F5 to remind the user to accept the Duo request on their phone. So all they do is accept the Duo request and the F5 passes them through. On the F5 APM profile, i would imagine this would need to occur in the RADIUS Auth step. Not sure how that would work.

Mick_0-1656538634656.png

 

LiefZimmerman
Community Manager
Community Manager

@JRahm or @buulam - any ideas where we might go with this one?

------
Lief ZimmermanLiefZimmerman | @LiefZF5 | DevCentral Community Manager

buulam
Community Manager
Community Manager

Hi @Mick have you seen this configuration? This method provides a message to the user to check their device.

https://duo.com/docs/f5bigip-web

I think the only alternative with the RADIUS approach is the message box as you've mentioned but I get that the additional click adds another step for the user.

~~~~~~~~~~~~~~~~~~
@buulam / YouTube.com/DevCentral