Secure Mobile Access 12.4 Administration Guide

Download PDF
Technical Documentation > Secure Mobile Access 12.4 Administration Guide > Authentication > Network and Authentication Configuration > Managing User Authentication > Integration of SMA with Cisco Duo Security MFA Server > SMA1000 Clients and AMC Authentication Support

SMA1000 Clients and AMC Authentication Support

Cisco Duo Security Multi-Factor Authentication servers are supported by all the actively supported clients like Connect Tunnel (CT) on Windows/Mac/Linux platforms, and Workplace.

SMA1000 AMC supports this authentication server for admin login and supports user enrollment as well.

Access methods like DeviceVPN, ActiveSync, and Outlook access do not support user-interaction and are forced to authenticate based on Duo's automatic authentication method. This means authentication happens via authentication methods like Push notification or phone call (if available for the user) without any interaction with user. User enrollment is not be supported for those access methods.

After you have integrated and configured SMA1000 with Cisco Duo Security MFA, when you log into clients like CT or Workplace you can:

  1. Complete primary authentication. Select one of the MFA methods to authenticate.

    For example, if you have selected Duo Push and click OK, approve notification is sent to your device.

  2. In order to change the MFA authentication method, click the Cancel button to go back and view the available authentication methods.
  3. Enroll by redirecting the user to Duo enrollment portal if they are not already enrolled with Duo MFA server.

The workflow depicts the Cisco Duo Security MFA server service for a user :

Was This Article Helpful?

Help us to improve our support portal

Yes! Not Really

Techdocs Article Helpful form

  • Hidden
  • Hidden

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.
  • Hidden
  • Hidden