Security

How to set up multifactor Authentication with Duo Security via Duo Auth proxy on Splunk 6.6.5?

mhigginson
Explorer

I'm trying to setup multi-factor authentication using Duo Security on Splunk 6.6.5. Our Splunk server isn't allowed to talk to Duo's API servers directly due to security restrictions. I have set up a DUO auth proxy server following the guide here [https://duo.com/docs/authproxy_reference. When I go to setup the multi-factor authentication in Splunk there isn't a spot for a proxy server so I'm just specifying the proxy server as the API hostname. I'm getting timeout errors and am not able to finish setup. I was just wondering if anyone else has had to use a duo proxy server for mfa and what they did to get it to work.

Thanks

Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...