Security

How to set up multifactor Authentication with Duo Security via Duo Auth proxy on Splunk 6.6.5?

mhigginson
Explorer

I'm trying to setup multi-factor authentication using Duo Security on Splunk 6.6.5. Our Splunk server isn't allowed to talk to Duo's API servers directly due to security restrictions. I have set up a DUO auth proxy server following the guide here [https://duo.com/docs/authproxy_reference. When I go to setup the multi-factor authentication in Splunk there isn't a spot for a proxy server so I'm just specifying the proxy server as the API hostname. I'm getting timeout errors and am not able to finish setup. I was just wondering if anyone else has had to use a duo proxy server for mfa and what they did to get it to work.

Thanks

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...