[IPS Marketplace] Duo Authentication

[NewsBot]

Duo Authentication lets you add Duo as another Multi Factor Authentication (MFA) option. Duo is a paid service with a limited free tier (up to 10 users) which allows centralized management of all authorized users.

Setup Instructions

1. Upload the plugin XML file to your Admin CP to install it.
2. Sign up for an account at Duo: https://signup.duo.com/
3. On your Duo dashboard, create a new "Web SDK" application. See the screenshot above (with 3 arrows and numbers) for an image of how to do this.
4. Make a note of the Integration Key, Secret Key, and API Hostname. Additionally, ensure that "Let users remove devices, add new devices, and reactivate Duo Mobile" is checked. If it is not, you will need to enroll your users yourself and they will be unable to manage their Duo account (add/remove authorized devices) from within Invision Community. If enrolling manually, ensure that the username in duo is their Member ID in Invision Community. See the screenshot above (with the 2 red boxes) for an image of where to find these settings.
5. Copy the Integration Key, Secret Key, and API Hostname into the Duo settings in the Multi Factor Authentication area of the ACP.
6. Toggle Duo from "Disabled" to "Enabled" -- your members can now use Duo!

To manage which types of notifications are supported (push, SMS, phone call, passcode), edit the policy on the Duo dashboard. You can also enable a "remember me" checkbox on the Duo dashboard which will allow the user to bypass MFA for a set number of days on the same device.

View the full article