You'll need this information to complete your setup. and get your Client ID, Client secret, and API hostname. Click Protect to the far-right to configure the application. Log in to the Duo Admin Panel and navigate to Applications.Ĭlick Protect an Application and locate the entry for OneLogin in the applications list.See Duo Knowledge Base article 7546 for additional guidance.

If your organization requires IP-based rules, please review Duo Knowledge Base article 1337.Įffective June 30, 2023, Duo no longer supports TLS 1.0 or 1.1 connections or insecure TLS/SSL cipher suites. The mobile app is able to work even when the mobile device is offline (please see documentation for how this works).This application communicates with Duo's service on SSL TCP port 443.įirewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability. Western recommends this method as the default second factor. This method is by far the easiest and most convenient option for most people (in fact, most end up using this method even after choosing a different one initially). The vast majority of consumers who have MFA enabled on a service use their mobile device and the mobile Duo app. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc No mobile phone? You can also use a landline or tablet, or obtain a hardware token. This can be done via SMS, voice call, one time passcode, the Duo Mobile smartphone app, and so on. You will login as usual with your User ID and password, and then use your device to verify that it's you. Once you have set up your Duo Security profile you are ready to go. This combination will prevent someone else from gaining access to your account, even if they have compromised your password. MFA adds a second layer of protection by combining something you know (your password) with something you have (your phone, or security token) to verify your identity. When you log into an MFA protected site, service or application, such as Office 365, you will enter your User ID and password as you normally do and you will use a secondary factor as well. MFA provides you with the best level of security,it's fast and easy to use. Multi‐factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. Passwords can often be stolen, guessed, or compromised - you might not even know someone is accessing your account. Passwords alone aren't enough anymore, that's why Western is introducing Multi-Factor Authentication (MFA). Duo Security is being used to secure MFA enabled services at Western University. Multi-Factor Authentication (MFA) is an authentication method in which a user is granted access only after successfully presenting two or more pieces of evidence to prove their identity. Note: Once WTS has enabled the new Universal Prompt, your default DUO device settings are no longer applicable. DUO Push is the recommended authentication method. If DUO Push was not your default setting prior to this change, the first time you log into an application that requires DUO, you will need to choose ' Other options' and then choose your preferred authentication method. Once WTS enables the new Universal prompt, DUO Push will be the default prompt for most DUO enabled applications on campus.

Duo mobile app