Configuring Cisco Duo Security MFA Server in SMA1000

Configure authentication settings for Cisco Duo Security Multi-Factor Authentication server in SMA1000 AMC.

To configure, do the following

1. In AMC, navigate to System Configuration > Authentication Servers.

2. Click New and select Cisco Duo Security MFA.

   

3. In the Name field, type a name for the authentication server.

4. Under the General section, enter the following keys copied from Duo admin portal:

   1. API hostname is a valid FQDN.

   2. Integration key, should be of minimum 1 character and maximum of 100 characters length.

   3. Secret key, should be of minimum 1 character and maximum of 100 characters length.

      

5. Enable Forward user IP to Cisco Duo MFA if you have enabled network-related settings under Duo's application policy server. By default this Forward user IP to Cisco Duo MFA check box is enabled. See Networks Policy Settings.

6. Click Test to test appliance connectivity with Duo MFA server and verify credentials.

7. Next enroll users for Cisco Duo Security Multi-Factor Authentication. See Enrolling users for Cisco Duo Security MFA Server.

.