Jump to content
Greg.Buerk

Duo Security Plugin

Recommended Posts

Duo Security Two Factor Authentication has come to LabTech Software. I have written a Plugin that implements this security and allows you to configure it completely and set it to each user\User class and system type.

 

Check out DUO Security Here https://www.duosecurity.com/

 

About Duo Security

 

Two-factor authentication made easy.

 

Duo Security's hosted two-factor authentication service brings strong, scalable security to organizations of any size. Duo's unique, high-availability architecture provides centralized management, self-service enrollment, and interactive secondary login through an intuitive web interface, eliminating the high costs, complexity, and confusion associated with traditional two-factor systems. Every day, over 1,000 organizations in 80+ countries around the world rely on Duo for their security.

 

 

Download the Plugin and Install It Here.

 

 

Updated, Will work in non US Environments.

Fixed Refresh Error when Setting Initial Configurations

 

59ec9434859c8_8-12-201410-53-07PM.png.b49246a36735c6c0114537b941b0c524.png

DuoInstaller.zip

Share this post


Link to post
Share on other sites

Thanks Greg, excited to try this out. We have looked at authanvil in the past, but it was deemed too expensive at the time. I'm not yet familiar with Duo, other than from their site it appears fairly affordable, how does it compare with authanvil?

Share this post


Link to post
Share on other sites

I like DUO better as it supports a lot more services and even has Google Authenticator support. The cost is less expensive as it's per user and not per token like AuthAnvil. You also don't have to host your own authentication server.

 

There are two rather large advantages with AuthAnvil.

 

- You can specify an override password to login if the server is not available

- You can exclude certain users from requireing multi-factor authentcation

- You cannot create a grouped user and this is a biggy. You can't allow your techs to share a domain admin account for a client and still each use their own token.

 

That being said, I am still moving forward with DUO as we never rolled out AuthAnvil to our clients and we've had it for years.

 

--AJ

Share this post


Link to post
Share on other sites

I have installed this plugin. I have entered our Auth API creds and saved. I then closed and re-opened the screen, enabled and selected a test user (my account). When I click the "Test Login" button, I enter my LabTech username and DUO passcode - and it says that the passcode failed.

 

EDIT: Also tried it using my DUO username....

 

EDIT2: After chatting with ajgyomber, I tried using WEB SDK integration. Still not working.....

 

Any ideas?

Share this post


Link to post
Share on other sites

Thanks to "damadhatter", I have been able to get DUO setup and working! :)

 

So, the trick for me was:

 

A) Use the Web SDK, NOT Auth API.

 

B) Make sure that my LabTech username matched my DUO Security username.

 

Once those two things were done, I was able to successfully pass the "Test Login". I was also then able to activate it against my LabTech username and begin logging in with DUO enabled.

 

A feature request:

- Any chance of tying this into the "DUO Push" functionality so that we get prompted by the DUO mobile app and just click the "Accept" button for login?

- Could you enable the Passcode box to accept the "Enter" key to click the "Login" button? I found I had to stop and click. (Yeah, a bit nit-picky, but it stood out to me.)

Share this post


Link to post
Share on other sites

Odd issue I am having now, today I started getting told that my pass-code was invalid (I see no authentication attempts on Duo's webpage) I went into the Duo plugin integration and unchecked "Enable Duo" now I am unable to re-enable or do anything with it. I tried unchecking the plugin and re-checking it in the plugin manager and still nothing :( any ideas?

Share this post


Link to post
Share on other sites

It has been a few months without and posts to this topic. This looks really interesting to me, but I was wondering if anyone could provide a quick review after using it for a few months?

 

Has it been reliable?

Share this post


Link to post
Share on other sites

I had issues with the DUO itself, since I was using the free version only support is email took almost 48hrs for a response. Needless to say I removed the plugin so I could log into my LT server.

Share this post


Link to post
Share on other sites

Is anyone else using this successfully? Downloaded and installed ok, but after entering details, all boxes are greyed out to enable Duo. We are big fans of Duo and would love to have it protecting LT.

Share this post


Link to post
Share on other sites

I was never able to get it working and their support wasn't too responsive. Actually check that, I don't know that I ever talked to one of their support people. I don't think I was ever able to get past their sales people...

Share this post


Link to post
Share on other sites

Just a quick reminder that items posted here to the LabTech Geek are NOT supported by the standard support teams of LabTech. Anything posted here is community driven and community supported. Thanks.

Share this post


Link to post
Share on other sites

Ok, for those that have the Enable "greyed" out please try the following:

1 Open the Duo Security Dashboard through the System Dashboard>Integration>Duo

2 Enter your Integration Key, Secret Key and API Hostname

3 Click SAVE

4 Close and Re-Open the Dashboard

The Enable Checkbox should now be selectable

Share this post


Link to post
Share on other sites

I cannot reproduce this issue in my labs. I would suggest uninstalling the plugin through the plugin manager and reinstalling using the above plugin. Once done, enter the Keys and Hostname, Save. Close the form and reopen.

Share this post


Link to post
Share on other sites

I would suggest uninstalling the plugin through the plugin manager and reinstalling using the above plugin. Once done, enter the Keys and Hostname, Save. Close the form and reopen.

Share this post


Link to post
Share on other sites

It's working now!! Has anyone figured out how to get PUSH working? The duo documentation says just type PUSH into the duo token field, but that isnt working.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×