topic Re: Does Splunk Cloud support DUO two factor authentication? in Security

Does Splunk Cloud support DUO two factor authentication?

dschneider — Wed, 25 Jan 2017 16:53:36 GMT

Does Splunk Cloud support DUO two factor authentication? I am a cloud customer who is also a duo customer. I do not see the ability to add DUO under authentication methods.

Thanks in Advance!

Re: Does Splunk Cloud support DUO two factor authentication?

pgreer_splunk — Wed, 25 Jan 2017 19:47:10 GMT

Yes, but the cloud instance needs to be at 6.5.x.

Re: Does Splunk Cloud support DUO two factor authentication?

dschneider — Tue, 31 Jan 2017 20:52:48 GMT

Thanks Much!

Re: Does Splunk Cloud support DUO two factor authentication?

khourihan_splun — Tue, 08 May 2018 00:10:58 GMT

Duo IDP is not supported in in Cloud b/c it cuts off local users needed for administration in Splunk Cloud. If DUO re-writes its IDP in the future it maybe possible.

Re: Does Splunk Cloud support DUO two factor authentication?

bohanlon_splunk — Wed, 19 Dec 2018 10:46:38 GMT

I downvoted this post because this answer is obsolete (and now wrong). see splunk internal engineering reference; spl-154283

Re: Does Splunk Cloud support DUO two factor authentication?

john_byun — Wed, 16 Jan 2019 18:17:36 GMT

Is this really not possible with Splunk Cloud? Is there a workaround to get MFA working?

Re: Does Splunk Cloud support DUO two factor authentication?

john_byun — Wed, 16 Jan 2019 18:21:54 GMT

Can Splunk build in an option to enable Duo on an account basis instead of globally?

Re: Does Splunk Cloud support DUO two factor authentication?

timroberts213 — Thu, 24 Oct 2019 21:02:13 GMT

How do we find this document?

Re: Does Splunk Cloud support DUO two factor authentication?

splunkindonuts — Thu, 21 Nov 2019 19:17:51 GMT

Can Splunk please confirm that this is still a valid answer? My Splunk Cloud ver 7.2 does not appear to have any options for configuring Duo support.

This page https://docs.splunk.com/Documentation/Splunk/8.0.0/Security/AboutMultiFactorAuth clearly states

"Splunk Cloud does not support
multifactor authentication with Duo
Security."

which is a contradiction to this accepted answer.

If Duo is supported in Cloud 7.x/8.x please point us to the appropriate documentation.

Re: Does Splunk Cloud support DUO two factor authentication?

davidpaper — Tue, 21 Jul 2020 13:59:40 GMT

Hi,

While it is true that there is no direct support for 2FA (Duo) in Splunk Cloud anymore (it was removed after 6.6 I believe), the way to still achieve 2FA is to do it at the SAML/IDP layer. As long as your IDP supports 2FA and the 2FA bits happen outside of Splunk, go for it.