You can share this direct Duo Central device management link from your internal IT help sites and or other communications you send to users. The Duo Central device management site can also be accessed by users directly using the standalone URL shown on the page, which is something like. If the effective authentication policy is "Bypass 2FA" or "Deny access" then the device management link isn't shown either. Users who access Duo Central but do not exist in Duo, which is possible when you have applied a new user policy that allows access to unenrolled users, do not see the "Manage Devices" link. If more than five minutes have passed between the user logging into Duo Central and the user clicking the "Manage Devices" link then the user must repeat both primary SSO login and two-factor authentication, regardless of an existing SSO authentication session or whether the user chose to remembered device. Duo will automatically create a user for them in Duo when they access device management. If you've enabled the self-service portal for Duo Central then you can also activate the Enable a standalone URL for the self-service portal that will appear on Duo Central and can be shared option to have Duo Central show a "Manage Devices" link at the top of the page which will let enrolled users - that is, users who exist in Duo with one authentication device - add, update, and remove authentication devices after they've already logged in to Duo Central.Ĭheck the Allow unenrolled users to enroll 2FA devices into Duo when the New User Policy is set to "Allow Access without 2FA" option to allow a user unknown to Duo to access self-service device management if they successfully complete first-factor authentication and the New User Policy is set to "Allow Access without 2FA". This provides access to the "Manage devices" option in the Duo Universal Prompt during login. See the self-service portal documentation for more information about self-service for existing enrolled Duo users.Ĭheck the Enable the self-service portal for Duo Central and allow access to the portal in the login prompt to allow access to device management for enrolled users as they log in to Duo Central to access SSO applications and other bookmarked apps. New users who log into Duo Central and are subject to a policy that requires two-factor authentication can manage devices from the authentication prompt or from within Duo Central. The Self-service Portal lets existing Duo users add, update, and remove authentication devices from the Duo prompt or from Duo Central. Your users will be able to access that link from the Duo Central page to get support. Optionally set the Get help link to the URL for your organization's help desk or internal instructions. If you do not already have a custom subdomain set, you can click Create your custom subdomain to do so. The URL is the website address users will visit to log into Duo Central. The descriptive name you enter as the Duo Central name is shown to your users in the Duo Push request when logging into Duo Central, and is the name of the Duo Central page they see in their browser tab. You'll be redirected to the "Tiles" tab after saving. If you make any changes, scroll to the bottom of the page and click Save Settings. The Duo Central Configuration & Policy tab allows you to configure a help link, custom URL, custom policies and more. Review the information on the "Duo Central" page. Log in to the Duo Admin Panel, click Single Sign-On in the navigation bar on the left, and then click Duo Central. Role required: Owner, Administrator, or Application Manager While other browsers may work with Duo Central, we actively test and support the browsers listed in the table. Not all browsers support all Duo authentication methods, so for the widest compatibility we recommend Chrome.Ĭheck the table below for supported browser versions.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |