Security

How to set up multifactor Authentication with Duo Security via Duo Auth proxy on Splunk 6.6.5?

mhigginson
Explorer

I'm trying to setup multi-factor authentication using Duo Security on Splunk 6.6.5. Our Splunk server isn't allowed to talk to Duo's API servers directly due to security restrictions. I have set up a DUO auth proxy server following the guide here [https://duo.com/docs/authproxy_reference. When I go to setup the multi-factor authentication in Splunk there isn't a spot for a proxy server so I'm just specifying the proxy server as the API hostname. I'm getting timeout errors and am not able to finish setup. I was just wondering if anyone else has had to use a duo proxy server for mfa and what they did to get it to work.

Thanks

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...