I'm on the 6.5.2 release and I have Duo turned on in the Splunk configs. It has been working great, but I just found out that I cannot login as user admin in Splunk Web. I get this message:
Access Denied. The username you have entered cannot authenticate with Duo Security. Please contact your system administrator.
That's rather inconvenient! Surely there is a way around this?
are you using the Duo Splunk Connector or the Duo Log Add-on?
No, this has nothing to do with add-on software. I've configured Splunk to require Duo MFA at logon time. See this here: