You've added your security key (in this example, a security key from Yubico)! It is listed with your other enrolled devices.
Proceed with the security key enrollment process as shown above in Initial Enrollment with a Security Key. Click it and approve the Duo login request using your already enrolled phone or other device. At the Duo Prompt you'll see an Add a new device link on the left. Navigate to your Duo-protected service and log in. If you previously enrolled other devices in Duo, you can easily add your new security key as an additional authenticator as long as your administrator has enabled Duo's self-service portal. You'll see whether the security key identification was successful or not.Ĭongratulations! You have enrolled your security key.Īdding a Security Key From the Duo Prompt You may also be asked if you want to allow Duo to access information about your security key (click Allow or Proceed as applicable). When enrolling your security key, you'll be prompted to tap to enroll your security key (possibly more than once). The security key enrollment window automatically tries to locate your connected security key for approval.ĭepending on your security key model, you'll need to tap, insert, or press a button on your device to proceed. If you're using Safari 14.1 or later, click the Initiate enrollment button to proceed. Make sure that you're not blocking pop-up windows for the enrollment site before continuing. Select Security Key from the list of devices and then click Continue. Initial Enrollment with a Security KeyĪccess the Duo enrollment page via a link emailed by your administrator, or when you log in for the first time to a Duo protected resource. You can enroll your security key during the initial self-enrollment process or, if you have already enrolled in Duo using a different device (like your mobile phone), you can add your security key as an additional authentication device from the device management portal. Check with your organization's support team or help desk to verify that security keys are allowed if you are uncertain. We do not support U2F-only security keys (like the Yubikey NEO-n).Īdditionally, your administrator must enable the use of security keys in Duo. WebAuthn/FIDO2 security keys from Yubico or Feitian are good options. Support for authentication is limited to web applications that show Duo's inline browser prompt. A supported browser ( Chrome 70, Firefox 60, Safari 13 or later), or Microsoft Edge 79 or later.In order to use a security key with Duo, make sure you have the following: You may also see WebAuthn referred to as "FIDO2". Duo uses the WebAuthn authentication standards to interact with your security keys. Adding a Security Key From the Duo PromptĪ security key plugs into your USB port and when tapped or when the button is pressed it sends a signed response back to Duo to validate your login.
0 kommentar(er)
