The way to select authentication methods of DUO using GlobalProtect

[animofernando]

Good day! How are you doing?

I'm looking for a way to select authentication methods of DUO while I'm using Globalprotect

(NOT USING Captive Portal. There are so much problems shown when user tried to authenticate)

I've done test about 2 factor authentication without authentication server

(but I should have a proxy server, of course)

1st authentication - Local

2nd authentcation - DUO

1) Passcode - Yes (Succeeded)

2) PUSH, SMS, PHONE CALL - TEHRE ARE NO OPTIONS FOR THAT

After I've got authenticated from a local, when I'm trying to 2nd authentication through DUO

I can't see any other choices of authentication methods, such as PUSH, SMS, and Phone call.

All I can do is just submit the passcode on my smartphone.

So I'm looking for a way that I can make an another way to choose authentication methods.

Can anyone enlight to me for this issue?

[apackard]

Isn't this where you have to append a comma and the selected method to the user password i.e.

Password1,push

to tell it Password1 is your password and you want to use the push option for your second factor?

[animofernando]

The customer is using U2F Token which authenticated when they insert USB. So, Yes. I want to configure that first authentication 'local', and second one is 'U2F Token' or 'PUSH' also would be fine. I think I should configure at 'authproxy.cfg', but I don't know what factors should I put in.

[animofernando · Accepted solution]

As I configured 2FA with DUO U2F Token, it worked well.

Thx