How to set up multifactor Authentication with Duo Security via Duo Auth proxy on Splunk 6.6.5?


I'm trying to setup multi-factor authentication using Duo Security on Splunk 6.6.5. Our Splunk server isn't allowed to talk to Duo's API servers directly due to security restrictions. I have set up a DUO auth proxy server following the guide here [ When I go to setup the multi-factor authentication in Splunk there isn't a spot for a proxy server so I'm just specifying the proxy server as the API hostname. I'm getting timeout errors and am not able to finish setup. I was just wondering if anyone else has had to use a duo proxy server for mfa and what they did to get it to work.


.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!