This first authentication after updating the OneLogin setting shows the traditional Duo prompt in a redirect instead of an iframe. If you already use Duo with OneLogin you need to make a configuration change in OneLogin, and then log in with Duo 2FA again so that Duo makes the Universal Prompt activation setting available in the Admin Panel. If you're setting up Duo with OneLogin for the first time you can activate the Universal Prompt experience immediately from the Duo Admin Panel.
#Duo security login update#
OneLogin has already updated their hosted Duo OneLogin application to support the Universal Prompt, so there's no installation effort required on your part to update the application itself. The new Universal Prompt provides a simplified and accessible Duo login experience for web-based applications, offering a redesigned visual interface with security and usability enhancements. The Duo Universal Prompt has built-in protection from unauthorized domains so this setting does not apply. If you plan to permit use of WebAuthn authentication methods (security keys, U2F tokens, or Touch ID) in the traditional Duo Prompt, Duo recommends configuring allowed hostnames for this application and any others that show the inline Duo Prompt before onboarding your end-users. Previously, the Client ID was called the "Integration key" and the Client secret was called the "Secret key".
See Protecting Applications for more information about protecting applications in Duo and additional application options. You'll need this information to complete your setup. and get your Client ID, Client secret, and API hostname. Click Protect to the far-right to configure the application.
This application communicates with Duo's service on SSL TCP port 443.įirewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability.
0 kommentar(er)
