The way to select authentication methods of DUO using GlobalProtect

Reply
Highlighted
L2 Linker

The way to select authentication methods of DUO using GlobalProtect

Good day! How are you doing?

 

I'm looking for a way to select authentication methods of DUO while I'm using Globalprotect

(NOT USING Captive Portal. There are so much problems shown when user tried to authenticate)

 

I've done test about 2 factor authentication without authentication server

(but I should have a proxy server, of course)

 

1st authentication - Local

2nd authentcation - DUO

 

1) Passcode - Yes (Succeeded)

2) PUSH, SMS, PHONE CALL - TEHRE ARE NO OPTIONS FOR THAT

 

After I've got authenticated from a local, when I'm trying to 2nd authentication through DUO

I can't see any other choices of authentication methods, such as PUSH, SMS, and Phone call.

All I can do is just submit the passcode on my smartphone.

 

So I'm looking for a way that I can make an another way to choose authentication methods.

Can anyone enlight to me for this issue?

 

Tags (4)
L4 Transporter

Re: The way to select authentication methods of DUO using GlobalProtect

Isn't this where you have to append a comma and the selected method to the user password i.e.

 

Password1,push

 

to tell it Password1 is your password and you want to use the push option for your second factor?

L2 Linker

Re: The way to select authentication methods of DUO using GlobalProtect

The customer is using U2F Token which authenticated when they insert USB. So, Yes. I want to configure that first authentication 'local', and second one is 'U2F Token' or 'PUSH' also would be fine. I think I should configure at 'authproxy.cfg', but I don't know what factors should I put in.

L2 Linker

Re: The way to select authentication methods of DUO using GlobalProtect

As I configured 2FA with DUO U2F Token, it worked well.

Thx

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!