{"id":75700,"date":"2023-06-05T13:11:20","date_gmt":"2023-06-05T17:11:20","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=75700"},"modified":"2023-09-12T10:55:29","modified_gmt":"2023-09-12T14:55:29","slug":"configure-duo-security-mfa","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/configure-duo-security-mfa","title":{"rendered":"Configure Duo Security MFA"},"content":{"rendered":"\n
<\/p><\/div>
Duo is ending support for the traditional Duo two-factor authentication prompt on March 30, 2024. JumpCloud supports Duo universal prompt and recommends admins update to that method.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Use Multi-factor Authentication with JumpCloud to secure user access to your organization\u2019s resources, and enable JumpCloud Duo Security MFA to give your users the ability to use push notifications as a factor when MFA guards the User Portal and SSO applications.<\/p>\n\n\n\n
Read this guide to learn how to configure Duo Security for your org. Duo Security MFA gives your users the ability to authenticate to the User Portal and SSO applications with push notifications.<\/p>\n\n\n\n
<\/p><\/div>
You can also secure user access to resources with JumpCloud Protect, TOTP MFA, and WebAuthn MFA. See MFA for Admins<\/a> to learn more. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n MFA requires more than one factor to authenticate to a resource. Duo Security MFA allows users to authenticate to their User Portal using push notifications, phone callbacks, and mobile passcodes provided by Duo. Duo Security MFA is available for User Portal login, SSO application login, and password changes from the User Portal. <\/p>\n\n\n\n JumpCloud\u2019s Duo MFA integration does not include support for Duo System Agent Authentication for Windows, which is a different Duo component for use cases not related to MFA.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Read and understand the following considerations prior to enabling Duo Security MFA.<\/p>\n\n\n\n When you enable Duo security for your organization, users will also need a Duo account to make use of it as an MFA factor. If multiple MFA factors are enabled, users will have the option to choose which MFA factor they want to use to authenticate to the User Portal. If Duo MFA fails to authenticate a user, the user can change to an alternative MFA factor.<\/p>\n\n\n\n To begin using Duo MFA, you first need to configure a Duo application in Duo for the JumpCloud User Portal.<\/p>\n\n\n\n To create a Duo application, you will need to be an administrator with a Duo account<\/a>. Once that is complete, you can log into the Duo Admin Panel as an administrator and follow the instructions in the First Steps section of the Duo documentation.<\/p>\n\n\n\n Be sure to collect your Integration Key (Client ID), Secret Key (Client Secret), and API Hostname from the Applications area of the Duo Admin Panel.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Migrating to Universal Prompt for your Duo applications is a two-step process:<\/p>\n\n\n\n If the admin does not migrate to the Universal Prompt experience, users will continue to see the traditional prompt.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n To enable Duo Security for your organization<\/strong>:<\/p>\n\n\n\nAbout Duo Security MFA <\/h2>\n\n\n\n
<\/p><\/div>
Duo Security MFA Considerations<\/h2>\n\n\n\n
\n
Preparing Your Users<\/h2>\n\n\n\n
Creating a Duo Application in Duo<\/h2>\n\n\n\n
\n
<\/p><\/div>
Enabling Universal Prompt<\/h2>\n\n\n\n
\n
<\/p><\/div>
\n
Protecting the User Portal with Duo MFA<\/h2>\n\n\n\n