topic Re: The way to select authentication methods of DUO using GlobalProtect in General Topics

The way to select authentication methods of DUO using GlobalProtect

animofernando — Fri, 29 Sep 2017 04:22:17 GMT

Good day! How are you doing?

I'm looking for a way to select authentication methods of DUO while I'm using Globalprotect

(NOT USING Captive Portal. There are so much problems shown when user tried to authenticate)

I've done test about 2 factor authentication without authentication server

(but I should have a proxy server, of course)

1st authentication - Local

2nd authentcation - DUO

1) Passcode - Yes (Succeeded)

2) PUSH, SMS, PHONE CALL - TEHRE ARE NO OPTIONS FOR THAT

After I've got authenticated from a local, when I'm trying to 2nd authentication through DUO

I can't see any other choices of authentication methods, such as PUSH, SMS, and Phone call.

All I can do is just submit the passcode on my smartphone.

So I'm looking for a way that I can make an another way to choose authentication methods.

Can anyone enlight to me for this issue?

Re: The way to select authentication methods of DUO using GlobalProtect

apackard — Fri, 29 Sep 2017 18:44:32 GMT

Isn't this where you have to append a comma and the selected method to the user password i.e.

Password1,push

to tell it Password1 is your password and you want to use the push option for your second factor?

Re: The way to select authentication methods of DUO using GlobalProtect

animofernando — Tue, 10 Oct 2017 01:51:22 GMT

The customer is using U2F Token which authenticated when they insert USB. So, Yes. I want to configure that first authentication 'local', and second one is 'U2F Token' or 'PUSH' also would be fine. I think I should configure at 'authproxy.cfg', but I don't know what factors should I put in.

Re: The way to select authentication methods of DUO using GlobalProtect

animofernando — Thu, 23 Nov 2017 00:13:22 GMT

As I configured 2FA with DUO U2F Token, it worked well.

Thx